$sth = $dbh->prepare(q{select username, password from reg 

where username = ?});

$sth->execute($testUsername);