use warnings;
use strict;
use DBI;
use CGI::Carp qw( fatalsToBrowser );
use CGI qw( header );
use HTML::Entities qw( encode_entities ); # Updated and below.

my $attr = { RaiseError => 1 };

my $statement = <<"";
      SELECT top 1 Quote, CharacterName, GameTitle
        FROM dbo.GameQuotes
    ORDER BY +newid()

my $dbh = DBI->connect('dbi:ODBC:SQLServer', '', '', $attr)
    or die "$DBI::errstr";

my $sth = $dbh->prepare($statement);

$sth->execute;

my ( $quote, $character, $game ) = 
    map { encode_entities($_) }
    $sth->fetchrow_array;

print header();

print <<"";
<blockquote>
   <p>$quote</p>
   <cite>&ndash;$character <br />
      $game</cite>
<blockquote>

$dbh->disconnect;