小喵 🐈 says to OwO
mysql_query("SELECT pw FROM users WHERE username = '" . mysql_real_escape_string(isset($_GET['username']) ? $_GET['username'] : '') . "' LIMIT 1")