I wouldn't put the htmlentities() call in the method, because I might want the row for something else.
I'd probably also use [man]PDO[/man] instead (or, rather, wrap your classes around PDO so that you can specify your own interface), since, for example, the job of fetching one row from a result set and creating from it an object with fields named for the columns is:
$object = $result_set->fetchObject();
. Passing an additional class name allows the returned object to be an instance of that class.