$query = "SELECT * FROM `users` WHERE username='$username' and password='".md5($password)."'";
$result = mysqli_query($con,$query) or die(mysql_error());
$row = mysqli_num_rows($result);

//if there is result return from the database
if($row == 1){
    //login betul
}else{
    //login salah
}