I've been searching for days and can't figure out how to do this.

I've got a script producing a form using CGI: 

use strict;
use diagnostics;

use CGI qw(:standard);
use CGI::Carp qw/fatalsToBrowser/;

use Win32::ODBC;
use lib '/perlcgi/settings';
require 'settings.pl';  # Included configuration file which contains g
+lobal variables

my %labels = (
    MA    => 'Mortgage Advisers',
    CA    => 'Customer Advisers',
    BM    => 'Branch Management',
    HO    => 'Head Office',
    Acc    => 'Accord',
    MSa    => 'MCC Sales',
    MSe    => 'MCC Service',
);
$today = 'somedate'

my $cgi    = CGI->new;
print $cgi->header('text/html');
my $dept    = $cgi->param('department');

if (defined $dept) {
    if (exists $labels{$dept}) {
        # FIXME
        # untaint $dept and put it into database
        print
            $cgi->start_html,
            $cgi->p("$dept was received."),
            $cgi->end_html;
    } else {
        print
            $cgi->start_html,
            $cgi->p("$dept was received, but is not a valid department
+ name."),
            $cgi->end_html;
    };
} else {
    print
        $cgi->start_html,
        $cgi->start_form(
            -action    => $cgi->script_name,
        ),
        $cgi->popup_menu(
            -name        => 'department',
            -values        => [keys %labels],
            -labels        => \%labels,
        ),
        $cgi->submit,
        $cgi->end_form,
        $cgi->end_html;
};

[download]
This is the SQL statement I want it to execute:
 #     $SqlStatement = "SELECT * FROM Pipeline WHERE Publish<='$today'
+ AND Expiry>='$today' AND $dept='Must Read'";

[download]
My problem is connecting to the database and then executing the SQL statement from within the CGI. I can't use DBI or anything wonderful like that, so I'm stuck with Win32::0DBC. I just can't figure out how to build this into the CGI way of laying stuff out. My usual way of connecting like this: 
  if (!($db=new Win32::ODBC($DSN))) {
   print "Error connecting to Database\n";
   print "Error: " . Win32::ODBC::Error() . "\n";
  }
  $SqlStatement = "SELECT * FROM BulletinGroups";
  if ($db->Sql($SqlStatement)) {
    print "SQL failed.\n";
    print "Error: " . $db->Error() . "\n";
  } else {
    while($db->FetchRow()) {
    Do something here
}

[download]
just won't work. ($DSN is defined in settings.pl)

I'm totally confused.

Any help would be gratefully appreciated.

In reply to CGI executing a SQL statement by kjg

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.