You've already received a mess of good answers, so I won't belabor those points. I'm just going to offer a suggestion: Specifically, don't use '*' as a column list for a SELECT statement. It'll bite you more often than it will help you. The problems are:

• Table changes will change your result sets, often requiring code edits.
• You'll often be reading much more data than you need, increasing network usage.
• You may also be pulling back information you already know (username and password in this case), further impacting network usage.
• You can unnecessarily transmit confidential information that you don't need (again username and password).
• A brief examination of your code won't show you which table columns are in use, making database alteration a bit more difficult.

Generally, request what you need, and only what you need.