Method is post but you're using Get. Use $_POST to get user's input.

Is the password really "no"?

echo $query to the browser, then paste it in the sql tool on phpmyadmin, it might give a syntax error that'd be a pain to parse by eye.