Ver original$query=mysql_query("SELECT * FROM users WHERE user = '".trim(addslashes($_POST['user']))."' AND password = '".$hash."');
Ver original$query=mysql_query("SELECT * FROM users WHERE user = '".trim(addslashes($_POST['user']))."' AND password = '".$hash."'");