// Define $myusername and $mypassword
$myusername=$_REQUEST["myusername"];
$mypassword=$_REQUEST["mypassword"];

$sql="SELECT * FROM $tbl_name WHERE username=".mysql_real_escape_string($myusername)." and password=".mysql_real_escape_string($mypassword)."";
echo $sql;