Pasted

<?php
//*
Search in google for better solution!
*//
    $username = mysql_real_escape_string($_POST["username"]);
    $password = mysql_real_escape_string($_POST["password"]);
    $sql = "SELECT * FROM users WHERE username='" . $username . "' AND password='" . $password . "'";
    $response = mysql_query($sql);
    ?>