$stmt = $mysqli -> prepare('SELECT username FROM users_table WHERE username = ? AND password = MD5(?)');
$stmt -> bind_param("ss",$username,$password);
$stmt -> execute();
$stmt -> bind_result($result);
$stmt -> fetch();