<?php $sql = ("SELECT 'password' FROM 'news_accounts' WHERE login = $_POST['login'];"); ?>
<?php $sql = ("SELECT 'password' FROM 'news_accounts' WHERE login = $_POST['login'];"); ?>
$sql = ("SELECT 'password' FROM 'news_accounts' WHERE login = $_POST['login'];");
$sql = ("SELECT 'password' FROM 'news_accounts' WHERE login = '".mysql_real_escape_string($_POST['login'])."';");
"SELECT 'password' FROM 'news_accounts' WHERE login = '".mysql_real_escape_string($_POST['login'])."';"
"SELECT `password` FROM `news_accounts` WHERE login = '".mysql_real_escape_string($_POST['login'])."';"