Well the query is used for a login and simultaneous ban check, the final query is something supposed to fetch the hash from the table in accordance with the proper username, the concate it and md5 is and check whether it's the same as the password in the table mrf_users where the username is mrferos