Just for correctness reasons, the reason this attempt doesn't work is that you attempt to interpolate the unescaped image data directly in to your sql statement. This is bad. Use placeholders, or at least dbi->quote.