Why another if sentence?

Question

if ($username == $row['username'] && $pwd == $row['password'])

Isn’t the above sql already judged?

Answer 1

It should be more rigorous. You can judge some other logic in the if, such as whether the user is bound, etc.