$query = $pdo->prepare("SELECT * FROM users WHERE username=:username");
$query->bindValue(":username", $username, PDO::PARAM_STR);
$query->execute();
$row = $query->fetchAll();