my $sth = $dbh->prepare ("select username, password from users where sid='$input';" );