$usersql = $DB_site->query_first("SELECT userid FROM user WHERE username = '" . addslashes(htmlspecialchars($utm[username])) . "' AND password = '" . addslashes(md5($utm[password])) . "'");