You need to get the row that contains the username (assuming usernames must be unique). Then call the password column and compare the inputed password with the password that's in the column. In other words, the query should only call the row that has a certain username, and AFTER that you check to see if the password matches. That's my thought at least.