my $stmt = "SELECT * FROM users WHERE $searchfield = ? ORDER BY ? ASC";
warn("statement =  '$stmt'");    

##</code><code>##

[Mon Mar 19 19:01:04 2018] update_tables.cgi: statement =  'SELECT * FROM users WHERE lastname = ? ORDER BY ? ASC' at update_tables.cgi line 462.