my $SQL = "SELECT col1, col2 FROM table WHERE lastname=?";
my $ST = $DB->prepare($SQL) or die;
$ST->execute($last_name) or die;