You probably should be using a proper placeholder rather than the literal string in your INSERT. Aside from your apparent length problem you also minimize exposure to SQL injection attacks in a CGI context. See perldoc DBI for more details.