use Validate;
use strict;
use CGI qw(:standard);
	
	my $firstname = Validate->alphanum( param( 'firstname' ) );
	print "Missing or invalid first name\n" unless $firstname;
	
my $stmt = "INSERT INTO tablename VALUES ('$firstname')";
excute...