CREATE TABLE `users` (
`username` varchar(64) DEFAULT NULL,
`password` varchar(64) DEFAULT NULL
);

INSERT INTO users VALUES ('bob', 'pass');

$query = "SELECT * from users where username="".$username."" and password="".$password.""";

SELECT * from users where username=""
"="
" and password="
""
=
""