my $sql = 'select comp_name from company where comp_name = ?';

my $query = execsql($sql, $hash{comp_id});

sub execsql {
    my ($sql, @bind_params) = @_;

    my $sth = $dbh->prepare($sql) || error('prep_sql', $0);
    $sth->execute(@bind_params)   || error('sql', $0);
    $dbh->commit;
    return $sth;
}