$sql = "
  SELECT * 
  FROM   dataflex 
  WHERE  attorney = ?
    AND  issue    = ?
";

$sth = $dbh->prepare($sql) 
   or die "preparing: ", $dbh->errstr;

$sth->execute($INPUT{'attorney'},$INPUT{'issue'})
   or die "executing: ", $dbh->errstr;