$sql = "SELECT * FROM user WHERE username = '$PHP_AUTH_USER' AND password = 'MD5(CONCAT(MD5('$PHP_AUTH_PW'), salt))' ";