$password=$_POST['passwd'];
$sql="SELECTpasswdFROMusersWHEREusername{=}^{\prime }bilal{a}^{\prime }andpasswd{=}^{\prime }$password';";