changed mysql_query to pdo::query