// Secure Method (Parameterized Query):
SELECT * FROM users WHERE username = :username AND password = :password