format(Query, sizeof(Query), "SELECT * FROM `wcf1_user` WHERE `username` = '%s' AND `password` = md5('%s')", escpname, inputtext);