$sth = $dbh->prepare(q{SELECT user_name, password from user where user_name = ?})
     or die("Database error: $!");