$query = mysql_query("select * from users where password='$password' AND    username='$username'", $connection);