Ajax+PHP+MySQL เกี่ยวกับการเรียกดูข้อมูลในตาราง ในตาราง account จะมีอยู่ 3 ฟิลคือ username, password, email

function forget(){
	var user=document.myforget.username.value;
	var email=document.myforget.email.value;
	if(user=="" || email ==""){
		alert("Please input form");
	}
else{
var req;
	if(window.XMLHttpRequest) req=new XMLHttpRequest();
	else if(window.ActiveXObject) req=new ActiveXObject("Microsoft.XMLHTTP");
	else{
		alert("Browser not support"); return false;
	}
	req.onreadystatechange=function(){
		if(req.readyState==4){			
			var x=document.getElementById("area");
			x.innerHTML=req.responseText;
			x.innerHTML+='<br><br><a href="index.html">Back to index</a>';
		}
		else{
			var x=document.getElementById("area");
			x.innerHTML="<img src=img/progess.gif>";
		}
	}
}
		var str=Math.random();
		var querystr="";
		querystr+="forget.php";
		querystr+="?var="+str;
		querystr+="&user="+user;
		querystr+="&email="+email;
		req.open("GET",querystr,true);
		req.send(null);
}

<?php

	$user = $_GET["user"];
	$email = $_GET["email"];
	

	$objConnect = mysql_connect("localhost","root","1234") or die("Error Connect to Database");
	$objDB = mysql_select_db("mydatabase");



	$sql = "select * from account where username='$user' and email='$email'";
	$result = mysql_query($sql) ;
	$row = mysql_num_rows($result) ;
	if($row==1)
	{
            $sql = "SELECT password FROM account WHERE username = '$user' and email = '$email'";
            $query = mysql_query($sql) or die ("Error Query [".$sql."]");
	}
	
	echo $query;
	mysql_close($objConnect);
?>