my $sth = $dbh->prepare( $sql );
$sth->execute( $bar, $baz );