sql server - PHP login page using MS SQL as database -

just wanna ask on how can make login page where-in user input username , password. have simple code here not work:

if(isset($_post['submit'])){   $user = $_post['usr'];    $pass = $_post['pwd']; $query = "select * [master].[dbo].[usertbl] [username] = '$user' , [password] = '$pass'"; $result = sqlsrv_query($conn,$query); if($user == $pass){ echo "success"; }else{  echo "invalid username/password"; 

nevermind $conn, database connection 100% working. feel free edit code or give inputs, know wrong here in validation part.

i have edited code count number of rows matching username , password. if count 1 login.

$query = "select * [master].[dbo].[usertbl] [username] = '$user' , [password] = '$pass'"; $result = sqlsrv_query($conn,$query); $num = sqlsrv_num_rows($result); if($num==1){     echo "success";} else{     echo "invalid username/password";}