my $sql = 'DELETE FROM student where student_id = ?';
my $sth = $dbh->prepare($sql);
foreach my $id ( $cgi->param('id') )
{
    if ( $id =~ /^(\d+)$/ )
    {
        $id = $1;
        $sth->execute($id);
     }
}