$sql = "SELECT * FROM table WHERE comp_id IN ('" . implode("','", array_map('mysql_real_escape_string', $arr)) . "')";