How can the SQL query in the provided PHP script be improved to ensure accurate data retrieval from the database?

The SQL query in the provided PHP script can be improved by using prepared statements to prevent SQL injection attacks and ensure accurate data retrieval from the database. Prepared statements separate SQL logic from user input, making it safer and more secure.

// Improving the SQL query using prepared statements
$stmt = $pdo->prepare("SELECT * FROM users WHERE username = :username");
$stmt->bindParam(':username', $username, PDO::PARAM_STR);
$stmt->execute();