MySQL PHP Controllo utenti

[VaLvOnAuTa]

$user = addslashes($_POST['username']);
$pass = addslashed($_POST['password']);
$query = "SELECT id FROM `utenti` WHERE username='".$user."' AND password='".$pass."'";
$qHandle = mysql_query($query);
if (mysql_num_rows($qHandle) > 0) {
  // username e password validi
}
else {
  // username e password invalidi
}