$sql = "SELECT Gauner FROM Gangster WHERE user = '$user' and password='$codeword'";
		$abfrage = mysql_query($sql); 
		$gauner = mysql_fetch_row($abfrage);
			while($row = mysql_fetch_object($abfrage))
			{
			echo "$gauner";
			}

$sql = "SELECT 
              Gauner 
           From 
              Gangster 
           WHERE 
               user = '".$user."' 
           AND 
               password = '".$codeword."'"; 
		$abfrage  = mysql_query($sql) or die(mysql_error()); 
		$gauner = mysql_fetch_row($abfrage);
			while($row = mysql_fetch_object($abfrage))
			{
			echo "$gauner";
			}

<?php
session_start();
?>
<?
if (!session_is_registered('user'))
{
die ("Sie müssen sich einloggen!");
}

$sql = "SELECT 
              Gauner 
           From 
              Gangster 
           WHERE 
               user = "$_SESSION['user']";

$sql = mysql_query("SELECT Gauner FROM Gangster WHERE user = ".$_SESSION['user'].");

 
while($row = mysql_fetch_row($sql)) { 
    echo $row['0'];
  }