Prepare your statement with placehold first, when you execute, go through your array, and pass them in.

my $sql= "SELECT tb.num1, tb.num2 FROM MYTABLE tb WHERE tb.num1=?  AND
+ tb.num2=? ";
$dbi->prepare($sql);
[download]

our query has a little problem, and you have to explicitly declare tb as an alias of MYTABLE as I did above.

You could also use in operator, depends on your need.