'; if(strpos($_POST['email'], '\'') !== false) { echo "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''' at line 6"; }else{ echo "Incorrect Username or Password!"; } ?>