my $sth = $db->prepare( $sql1 ) or die(...);
...
$sth->execute( $var );