...code sql connect...
my $year = param('year') || ''; # for testing only
my $sql = "select name
from mytable
where acc = '12345' and ( (year='$year') or (year = $year + 1) )";
my $res= $dbh->exec_select( $sql );
...code