$result = mysql_query('SELECT COUNT(*) from account where username="'.$username.'" and password="'.$password.'"');
$result = mysql_fetch_array($result);
if($result[0] > 0){
    ...
}