You should always use placeholders when inserting data into databases;

my $stInsert = $dbh->prepare( 'INSERT INTO agency (AgencyName, Email) 
+VALUES (?, ?)' );
$stInsert->execute( 'CNN', $to );
$stInsert->finish();

# ...
[download]