use CGI;
use DBI;

sub update_mytable($$$$$) {
  my ($db,$id,$name,$rank,$serialno)=@_;

  # Use late binding, good practice for some DBs; doesn't hurt others
  my $sql = "update mytable set name = ?, rank = ?, serialno =? where 
+id= ?";
  my $sth;

  # Wrap db activities in eval so non-fatal
  eval($sth = $db->prepare($sql) );
  eval( $sth->execute($name,$rank,$serialno,$id); ) unless $@;

  # 
  return $@?$@:1;
}

my $q = new CGI;
my $d = new DBI(....);
my $id = $q->param('id');
...
my $serialno = $q->param('serialno');
update_mystable($d,$id,$name,$rank,$serialno);
[download]

Is that what you meant to ask? Try looking at Merlyn's page or Ovid's page for hints on CGI tips.

--

Brother Frankus.

¤

Read documentation.

• DBI
• DBD::mysql
• DBIx::Simple
• DBIx::Abstract
• http://www.mysql.com/

- Yes, I reinvent wheels.
- Spam: Visit eurotraQ.

use strict;
use diagnostics;

############################################################
# Using the \$STATEMENT varible makes it easier
# for me to prepare it for 'quotes' that are needed
# by SQL (MySql) and helps me resolve my variables safely.
# ----------------------------------------------------------
  my $STATEMENT = "UPDATE SUPPORTDESK.CONTACT_PERSON SET SALUTATION=$S
+ALUTATION,FIRST_NAME=$FIRST_NAME,MIDDLE_INITIAL=$MIDDLE_INITIAL,LAST_
+NAME=$LAST_NAME,NOTES=$NOTES WHERE CONTACT_PERSON.CONTACT_PERSON_ID=$
+CONTACT_PERSON_ID";



############################################################
# Prepare the statement for database execution. This inserts
# quotes where needed
# ----------------------------------------------------------
  # $DBACCESS is the database connection handle '$dbh'
  my $COMMAND = $DBACCESS->prepare($STATEMENT);

  #Executed the statment.
  $COMMAND->execute;

############################################################
# Kill the statement handle so that you can safely 
# disconnect from the database.
# ----------------------------------------------------------
  $COMMAND->finish;
[download]