my $sth = $dbh->prepare("SELECT * FROM $users_table WHERE username = ? AND user_password = ?");
$sth->execute($username, $userpass);