php & Mysql

Hello, At present i am doing the program for library management.If any person want to take any book from the library then they have to login their username and password.for storing the username and password in database i have used mysql.For storing the password in mysql i have given like this Password(value) For retriving the username and password i have given the query like this. select * from user where username='uma' and password('uma); If i gave the query like this it display the result correctly.If i gave the password wrongly first time it is showing that no rows selected.Next time it is showing the entire record without checking the username's corresponding password. How do i go about with this?????? Or is there any other method to store the password fields in encrypt form and to retrieve the data?? Tell me as soon as possible Regards, Uma