$query = mysql_query("SELECT * from _users where username='".$_POST['username']."'") or die(mysql_error()); while(@($r = mysql_fetch_array($query))) {$password = $r['password'];}