Use bind_param to bind parameters 

dbh->selectall_arrayref had to be split into it's constituent parts: prepare, bind_param, execute and fetchall_arrayref to use bind_param to ensure that the project and change_id placeholders are varchars