$user = "peter";

$sth=$dbh->prepare("SELECT user, name FROM tabelle WHERE user=? && benannt=1");
$sth->execute($user);