Greetings all,
There is a way to use placeholders in a $dbh->do statement. Here is the documentation on it but just to give you something to work with here is a small example:

# Connect to the database.
my $dbh = DBI->connect("DBI:mysql:database=test;host=localhost",
          "joe","joe's password", {'RaiseError'=>1}) || die "unable to
+ connect to the database";
# Now the interesting part.
$dbh->do("INSERT INTO foo VALUES(1,?)",undef, "Tim");
[download]

This is because, according to the docs, you have the option of running a $dbh->do() with this syntax

# From the docs
$rows = $dbh->do($statement, \%attr, @bind_values)
[download]

Given that you don't have any attributes you just leave that part undef and then follow it with your values you want to bind your placeholders to. The placeholders take care of the quoting for you so there is no need for the $dbh->quote().

-InjunJoel