<?php
$stmt->query('SELECT * FROM users WHERE username = "'.$_GET['username'].'" AND password = "'.$_GET['password'].'"');