$query = mysqli_query($con, "SELECT * FROM tbluser WHERE Username = \"".$_POST["user"]."\" AND Password = \"".$_POST["pass"]."\";");