I wouldn't use a regex at all. Even with escaped metachars that can have surprising results if your database entries contain " and ".

my %seen;
my $concat = join " and ", grep !$seen{$_}++, @db_string;
[download]

Makeshifts last the longest.