$regchk[0]=I('post.user','htmlspecialchars');
$regchk[1]=I('post.password','htmlspecialchars');
$result=$user->where("`USER`='$regchk[0]' and `PASSWORD`='$regchk[1]'")->find();
echo $user->getLastSql();
exit;

输出SQL是
SELECT * FROM `money_user` WHERE ( `USER`='htmlspecialchars' and `PASSWORD`='htmlspecialchars' ) LIMIT 1