#prepare
my $sth = $dbh->prepare('SELECT * FROM people WHERE lastname = ? AND firstname = ?');

#execute with list of bindvars
$sth->execute( $lastname, $firstname );