Login with PDO

<?php
    session_start();

    require_once 'dbconn.php';

    $username = $_POST['username'];
    $password = md5($_POST["password"]);

    if (isset($_POST["submit"]))
    {
        $stmt  = $con->prepare("SELECT * FROM user WHERE username = :username AND password = :password");
        $stmt->execute(array(":username"=>$username, ":password"=>$password));
        $obj   = $stmt->fetchObject();
        $total = $stmt->rowCount();


        if ($total > 0 && $password = $obj->password)
        {
           $_SESSION["username"] = $obj->username;
           $_SESSION["jabatan"] = $obj->jabatan;


        }
    }
?>