Yes you can,
"SELECT * FROM `login` WHERE user='" urlencode($_GET['user']) . "';'"
(note this is an example.. there's much better tutorials on this all over the internet)
then see if the login was successful, and if so
The download object could be modified to download a file into memory, to make this easier, but communication with PHP and ASP is possible.