$sth = $dbh->prepare(qq(
SELECT *
FROM $pictures_table
WHERE stats="2"
AND poster_name = ') . param('name') . qq('
ORDER BY poster_name ASC));