string selectSQL = "SELECT ('count (*) FROM user WHERE username ='" + username + "' AND password ='" + password + "' LIMIT 1)";