my $sql = "SELECT DISTINCT 
                               
                               name, email, addr, location
                               
               FROM            my_users
               WHERE           year IN (" . join(', ', ('?') x @year) . ")
          ";
$i = 0;
my $query = $dbh->prepare($dbh) or die "Prepare failure: ".$dbh->errstr;
foreach my $year (@year) {
    $query->bind_param(++$i,$year);
}
$query->execute or die "Execute failure: ".$dbh->errstr;