$mysqli = new mysqli("localhost", "dbusername", "dbpassword", "database");

$username = "somename";
$password = "someword";

$query = "SELECT filename, filesize FROM users WHERE (name = ?) and (password = ?)";

$stmt = $mysqli->stmt_init();

if ($stmt->prepare($query)) {
    $stmt->bind_param("ss", $username, $password);
    $stmt->execute();

    $stmt->bind_result($filename, $filesize);
    while ($stmt->fetch()) {
        printf ("%s : %d\n", $filename, $filesize);
    }
    $stmt->close();
}

$mysqli->close();

$pdo = new PDO("mysql:host=localhost;dbname=database", "dbusername", "dbpassword");

$username = "somename";
$password = "someword";

$query = "SELECT * FROM users WHERE (name = :username) and (password = :password)";

$statement = $pdo->prepare($query, array(PDO::ATTR_CURSOR => PDO::CURSOR_FWDONLY));
$statement->bindParam(":username", $username, PDO::PARAM_STR, 10);
$statement->bindParam(":password", $password, PDO::PARAM_STR, 12);
$statement->execute();

while ($row = $statement->fetch(PDO::FETCH_ASSOC)) {
  printf ("%s : %d\n", $row["filename"], $row["filesize"]);
}
$statement->closeCursor();

$pdo = null;