use pdo to replace mysqli