local $"=",";
my $sth = $dbh->prepare(
       "SELECT * FROM $table 
        WHERE lastname  = $lastname 
        AND   firstname IN (@firstnames)
       "
);
$sth->execute( $lastname, @firstnames );