$yeardir=$ENV{'QUERY_STRING'};
$yeardir=~/^(19|20|21)[0-9]{2}$/ or die "Bad year\n";
...
opendir(DIR, "d:/wwwroot/CalvaryBaptist/Sermons/".$yeardir);