You use warnings, but you choose to ignore what Perl tells you. Once you actually look at the warnings, you will find that your SQL string does not look like what you might think it should. Printing $sql before passing it to DBI should also tell you that.