my $sql = q{SELECT username FROM db WHERE username=?};
my $sth = $dbh->prepare($sql);
$sth->execute(param("username"));