my $name = $cgi->param('name');
  my $query = "INSERT ... VALUES($name)";