$query = 'SELECT * FROM usuarios WHERE email = "'.$_POST['email'].'" AND contrasena = "'.$_POST['contrasena'].'"';