$sqlQuery = "SELECT username,email,phone FROM users WHERE username='bob'";

##</code><code>##

my $sql = $db->prepare("SELECT username,email,phone FROM users WHERE username=?");
$sql->execute("bob");