$sql = <<END_SQL;

select comp_name from company where comp_name = '$hash{$comp_id}'

END_SQL

$query = &execsql($sql);

sub execsql {
	my ($sql);
	($sql) = @_;
	my $sth = $dbh->prepare($sql) || &error('prep_sql', $0);
	$sth->execute || &error('sql', $0);
	$dbh->commit;
	return $sth;
	print "SQL: $sql\n";
}