inserting CGI-data into mysql-DB style question

[Moritz von Schweinitz]

sorry if this is a banal question, but my brain just got sick and tired
of

$dbh->do("INSERT INTO tablename
                                (
                                        firstname,
                                        surname,
                                        bla3,
                                        bla4,
                                        bla5,
                                        bla6
                                )
                VALUES
                                (
                                        ?,
                                        ?,
                                        ?,
                                        ?,
                                        ?,
                                        ?
                                )
                ", undef, $in{firstname}, $in{surname}, $in{bla3}, [and
so on]);

is there a nice way to qoute the contents of my %in, and insert them
without always having to count question-marks, and watching out that the
right hash-element maps to the right question-mark, which in turn maps
to the correct column?

all the nice bind-functions don't seem to make life easier in this
aspect.

am i missing some basic (my)SQL/DBI-command or something?

*confused*

M.