client-server execute Login

//server
PreparedStatement statement = null;
    try {
        statement = DatabaseUtilities.getConnection().prepareStatement(
                "SELECT * FROM user where id_user=? and password=MD5(?)");
        statement.setString(1, ids);
        statement.setString(2, password);
        ResultSet result = statement.executeQuery();
        User us = null;
        if (result.next()) {
            us = new User();
            us.setUserID(result.getString("id_user"));
            us.setUsername(result.getString("username"));
            us.setPassword(result.getString("password"));
        }

//client
User us = salesmanService.getUser(ids, password);

        if (us != null) {
            if (us.getUserID().equals(ids) && us.getPassword().equals(password)) {
                return true;
            } else {
                return false;
            }
        }