$sql="SELECT * FROM $tbl_name WHERE username='$username' AND password='".md5($_POST['password'])."' )";
$result=mysql_query($sql);