my $sql =
  sprintf("select * from tablename where username IN (%s)", join ",", ("?") x @userArray);
my $sth = $dbh->prepare($sql);
$sth->execute(@userArray);