Update: Oops! Herkum beat me to the punch!/Update

Seconded! You should definitely check out the placeholder syntax, as it fixes these problems for you. Something like the following should work for you:

my $SQL = "SELECT col1, col2 FROM table WHERE lastname=?";
my $ST = $DB->prepare($SQL) or die;
$ST->execute($last_name) or die;
[download]