[titanak]

What about this one?
_________________________________________________
mysql_query("SELECT `password` FROM `users` WHERE `username` = '%s'",function);