my $sth = $db->prepare("UPDATE table SET $updatestring WHERE tbl.field = '$lname'");