$username = $dbh->quote($username);
$dbh->do("INSERT INTO messages(von) VALUES ($username)");