my $sql = "SELECT * FROM users WHERE id = '" . $user . "'";