I could be off base - I know nothing about CGI:SESSION, and I haven't seen enough of your code... What if you replaced the literals in your update statements with placeholders and then pass through your values later to a prepared statement? I've often seen problems with interpolation of scalars in SQL statements, which is why I tend to prefer placeholders.