in reply to Insert into table when user clicks one of many submit buttons

$row = $form{id}; my $insert=qq~ insert into cart (id,cat_num) select id,catalog_num fro +m tracks where id ='$row'~;
sql injection alert! please read http://bobby-tables.com/