in reply to variables inside SQL statements

Go to the DBI docs and look up placeholders.