Just cleaning up the AM's post...

#!/usr/bin/perl

print "Content-type:text/html\n\n";

use DBI;
use CGI;
$query = new CGI;

my $dbh=DBI->connect('DBI:mysql:test','edward','password');

my $logname=$query->param('log');
my $passwd=$query->param('pass');

my $sth=$dbh->prepare(<<End_SQL);
SELECT * from login where log = "$logname"
End_SQL

$sth->execute();

@row=$sth->fetchrow_array;

$dbh->disconnect();
print <"TESTING</br>">;
print "</body></html>";
[download]

---

Content-type:text/html

DBI::db=HASH(0x81dc3e0)->disconnect invalidates 1 active statement han
+dle (eithe
r destroy statement handles or call finish on them before disconnectin
+g) at ./new.response.cgi line 22.
[download]

Update:
BTW: I just noticed this. Is there any specific reason why you are not using placeholders with prepare? I'd do it this way...

$sth = $dbh->prepare(qq{
    SELECT * from login 
    where log = ?
}) or die("Failed to prepare: $DBI::errstr\n");

$sth->execute($logname)
    or die("Failed to execute: $DBI::errstr\n");
[download]

Be lazy, and let DBI quote for you, its easier! :)

#!/home/bbq/bin/perl
# Trust no1!