$query="select * from user where username='$n' and password='$p'";
if($result=mysql_query($query)){
$row=mysql_fetch_assoc($result);

if($n !=$row['username']){
echo "invalid user";
exit();
}