my $sql = $db->prepare("SELECT username,email,phone FROM users WHERE username=?");
$sql->execute("bob");