sub mySQLQuote {
  my ($value,$maxlen) = @_;
  $value =~ s/\'/\'\'/g;
  $value = substring($value,1,$maxlen);
  return $value;
}
val1 = mySQLQuote(1);
$val2 = mySQLQuote("'");

$db->Sql("INSERT INTO Comment ( Field1, Field2 )VALUES ('$val1', '$val2') ");