my $col_clause = join(', ', @names);
my $sql  = "SELECT ".$col_clause." FROM ...";
my $sth2 = $dbh->prepare($sql) ...