Assuming that line 13 is the line where you assign $tmpStr and that line 17 is the line where you execute the $queryObj (it would have been nice if you'd told us the line numbers), then the unitialized value is probably from missing CGI parameters (e.g. they were left blank when the form was submitted or they are not spelled correctly). The unkown column error is pretty self explanatory ... did you perhaps mean to have an underscore instead of period between FIRST and NAME?

Once you get those issues resolved, you should read the DBI docs on placeholders because putting your CGI parameters directly in the SQL like you do is not a good idea.