my @WHERE = ();
push @WHERE, "username = '$username'" if $username;
push @WHERE, "password = '$password'" if $password;
push @WHERE, "name = '$name'" if $name;

$SQL = "SELECT FROM table WHERE " . join ' AND ', @WHERE;