So i am trying to create a login script, and this is what the login has to go through so you can log in.

<?php
session_start();
$username = $_POST["username"];
$user_password = $_POST["user_password"];
mysql_connect('localhost','602164_owner','');
mysql_select_db('501st_clanteam_one') or die('Could not select database');
$sql="SELECT FROM phpbb_users WHERE username='$username' AND user_password='$user_password'";
$result = mysql_query($sql) or die('Query failed: ' . mysql_error());
$count=mysql_num_rows($result);
if($count==100)
{
$_SESSION["username"] = $username;
$_SESSION["loggedIn"] = true;
header("Location:ProtectedPage.php");
}else{
header("Location:http://501st.clanteam.com/forum/ucp.php?mode=login");
}
?>

can you please tell me whats wrong with the script?
i get this error: Query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'FROM phpbb_users WHERE username='' AND user_password=''' at line 1