Good catch - exactly right. Use placeholders - they'll increase performance (not necessarily in this particular situation) and fix all quoting issues in one-fell-swoop. No reason not to use placeholders. Read the perldocs on placeholders by doing
perldoc DBI
and search (using the forward slash '/') for 'Placeholders'.
HTH.