my $sth = $dbh->prepare("
  SELECT * FROM foo WHERE bar=$qstring1 AND baz=$qstring2
"); 
$sth->execute();