my $sql = "insert into command_script(name,content,creater) values('$script',?,'flw521521');";
my $sth = $dbh_mbase->prepare($sql);
$sth->execute("$script_content") or die("SQL Failed:$sql\n");
如上,在脚本prepare的时候,脚本内容是用占位符?表示,因此在prepare不会报错,在execute时,绑定具体的值即可