[Sergei]

You don't do it like that.

pawn Код:

new string[128];
mysql_real_escape_string(password,password);
format(string,sizeof(string),"SELECT * FROM users WHERE username='%s' AND password='%s' LIMIT 1", GetName(playerid),password);
mysql_query(string);

If query gets any result then password was corrent and if it's doesn't it wasn't. I also suggest you to use MD5 hash (if you don't hash passwords with anything else).

Код:

SELECT * FROM users WHERE username='%s' AND password=MD5('%s') LIMIT 1

And I also suggest you to use threads for all queries for better performance.