$query .= ' where upper(env)=upper(?)';
  push(@sql_params,$query(env});
  ...

  my $sth = $dbh->prepare($query) or die;
  $sth->execute(@sql_params);