my $user_dbh = $dbh -> prepare("select name, passwort from user where name = '".$name."' and passwort = password($passwort)");