Enable tracing on the statement handle in question; a value of `2' usually will show what's going to and from the database backend. That'll show you what DBI is sending to mysql and you can see if something's not getting quoted correctly. You might have to use bind_param and explicitly set the type of one of the variables if it's not getting determined correctly automagically.