Oh, I forgot to mention that, for various reasons, including security, it is better to do this:
use strict;
use warnings;
my $query = "SELECT * FROM lawson.BUYER WHERE procure_group = ? AND buyer_code = ?";
my $st2 = $dbh->prepare("query");
$st2->execute('OCF', "$vBuyCode");
It doesn't have to...