eval $cgi->param('action');
open F, $cgi->param('file');
$dbh->do( "SELECT * FROM blah WHERE foo LIKE %" . $cgi->param('search') .'%' );