$rows = mysql_num_rows(mysql_query("SELECT 1 FROM `users` WHERE `login` = '".$_POST["login"]."' AND `password` = '".$_POST["password"]."' LIMIT 1"));
    if($rows > 0)
    {
        // loguj
    }
    else
    {
        // zle haslo
    }