my ($email)    = $dbh->quote($CGI->param('email')    || undef);
    my ($password) = $dbh->quote($CGI->param('password') || undef);