function login(){ extract($_POST); $qry = $this->db->query("SELECT * FROM users where username = \'".$username."\' and password