Sistema de identificación con problemas

[bLEx]

Código php:

$username = $_POST['username'];
$password = $_POST['password'];
 
$query = "select * from users where username = '".$username."' and `password` = '".$password."'";