Tamam
$user = $db->prepare("SELECT * FROM members WHERE nick = '".$nick."' AND password = '".$password."'");