$sql= "SELECT C.mast1, C.mast2 FROM MASTER WHERE C.mast1=? AND C.mast2=?";
$sth = $dbh->prepare($sql)
or die(...);
$sth->execute($check, $X_Y)
or die(...);
...