public static DBQueryUserResult getUser(String username, String password) {
		preQueryConnect();
		Actions.addAction(new Action(ActionType.INFO, "User query requested for input: " + username + "."));
		DBQueryUserResult userQueryResult = null;
		if(username.contains("'") || username.contains("\"") || username.contains(" ")) {
			return null;
		}
		synchronized(dbConnection) {
			Statement st = null;
			ResultSet res = null;
			try {
				st = dbConnection.createStatement();
				res = st.executeQuery(
						"SELECT * FROM " + DBConstants.USER_TABLE +
						" WHERE " + DBConstants.USER_USERNAME + "='" + username + "'" +
						" AND " + DBConstants.USER_PASSWORD + " LIKE BINARY '" + password + "' LIMIT 1");
				/* Return null if the user was not found in the database */
				if(!res.next()) {
					Actions.addAction(new Action(ActionType.INFO, "User Query returned 0x00."));
					return null;
				}
				userQueryResult = new DBQueryUserResult(res);
				Actions.addAction(new Action(ActionType.INFO, "Query Successful! Returning User: " + userQueryResult.getUsername() + "."));
			} catch (SQLException e) {
				Actions.addAction(new Action(ActionType.ERROR, "User Query had an error. Possibility of MySQL Injection Attempt. " + e.toString()));
			} finally {
				postQueryCleanup(dbConnection, st, res);
			}
		}
		return userQueryResult;
	}