sql escape

                <?php
                // DATABASE INFORMATION
                //select PLN from uzytkownicy where login = '$login'
                $server = 'localhost';
                $database = 'baza';
                $dbuser = 'root';
                $dbpassword = 'zaq12wsx';

                //CONNECT TO DATABASE
                $connect = mysql_connect("$server", "$dbuser", "$dbpassword")
                    OR die(mysql_error());
                   mysql_select_db("$database", $connect);
                //ALWAYS ESCAPE STRINGS IF YOU HAVE RECEIVED THEM FROM USERS
                $safe_username = mysql_real_escape_string($X);
                //FIND AND GET THE ROW
                $getit = mysql_query("select PLN from uzytkownicy where login = '".$login."'", $connect);
                $row = mysql_fetch_array($getit);

                //YOUR NEEDED VALUES
                $PLN = $row['PLN'];
                ?>