$password=md5($_REQUEST['dr']);
$result=mysql_query("SELECT dr FROM table WHERE user='".$username."'");
if (mysql_fetch_object($result)->dr==$password) {
            $okay=true;
}