$user = "peter";
my $sql = "SELECT user, name FROM tabelle WHERE user=" . $dbh->quote($user) . " AND benannt=1";
unless ($sth=$dbh->prepare($sql)) {
  die "Error in sql: ", $dbh->errstr, "\nSQL: $sql\n";
} # unless