use DBI qw(SQL_VARCHAR);

$sth->bind_param(1, $mrn, SQL_VARCHAR);
$sth->execute();