my $stmt = "SELECT * FROM users WHERE ? = ? ORDER BY ? 
+ASC";

##</code><code>##

$sth->execute($searchfield, $searchterm, $searchfield) or die "Unable to execute
+ query: " . $sth->errstr;    

##</code><code>##

[Mon Mar 19 19:01:04 2018] update_tables.cgi: statement =  'SELECT * F
+ROM users WHERE lastname = ? ORDER BY ? ASC' at update_tables.cgi lin
+e 462.


##</code><code>##

'SELECT * F
+ROM users WHERE $searchfield = $searchterm ORDER BY $searchfield ASC'