sub SQLQuote { my ( $data ) = @_; $data =~ s/'/\\'/g; return $data; }; #### SELECT * FROM table WHERE name=? AND id=? #### $dsn->Sql($SQL, $name, $id ); #### # Code courtesy of kudra++, errors courtesy of me $SQL = < SQL; SELECT * FROM table WHERE name=? and id=? SQL $statement = $dbh->prepare( $SQL ); $statement->execute($name, $id);