my $statement = $sql;
$statement =~ s/\?/$dbh->quote($_)/e for @bindvals;

print "The SQL query will be: [$statement]";