$statement = "SELECT city FROM database WHERE state=?";

$sth = $dbh->prepare($statement) or die "Couldn't prepare the query: ".$sth->errstr;

$rv = $sth->execute($FORM{state}) or die "Couldn't execute query: ".$dbh->errstr;