Without seeing your code, I can only guess that you are not using the DBI module's quote() method. It escapes special characters so that they can be used in SQL properly. You might also want to look through the DBI manpage for placeholders, as they will perform quoting automatically.