Comparaison variables php et base données mysql

if(!empty($_POST['user']) && !empty($_POST['password']))
{
    
    $pseudo = $_POST['user'];
    $password = $_POST['password'];
    
    
    try {
         $connexion = new PDO("mysql:host=$loalhost;dbname=Membres;charset=utf8", $user, $pass);
         $connexion->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        
    } catch (Exception $ex) {
        echo 'probleme de connexion à la base de donnée<br>'.$ex->getMessage();
    }
    
    
    $dbase =$connexion->prepare( 'SELECT Pseudo, Password FROM User WHERE Pseudo="'.$pseudo.'" AND Password="'.$password.'"');
   
    $dbase->execute();
    

   
    if($resultat=$dbase->fetch())
    {
        echo '<br>Bonjour  '.$resultat['Pseudo'];
    }
    else
    {
        echo '<br>Identifiants incorrect';
    }
}
 else {
    echo '<br>Veillez remplir vos idenfiants';
}