do I have to translate me hash to an array or use 'keys' and 'values'

Use keys or values, yes. You had the idea yourself, but apparently didn't try it. Often, you get results very fast and accurately by asking perl instead of asking Perl Monks.

Update Here's the solution:

$_ = $sql->quote($_) for values %hash
[download]

Don't use map where normal loops are good enough.

U28geW91IGNhbiBhbGwgcm90MTMgY
W5kIHBhY2soKS4gQnV0IGRvIHlvdS
ByZWNvZ25pc2UgQmFzZTY0IHdoZW4
geW91IHNlZSBpdD8gIC0tIEp1ZXJk