my $stmt = "SELECT * FROM users WHERE $searchfield = ? ORDER BY ? ASC";
warn("statement =  '$stmt'");