Potential leak of data: Simple Password

Detected 2 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: username $userid = mysqli_query($connection, "SELECT id FROM users WHERE name = ".$_POST['name']); //assuming you posted their username from a form session_start(); $_SESSION['userid']=$userid; ?> $query = ("UPDATE users SET username='$username', password='$password', email='$email' WHERE userID = '".$_SESSION['userid']."'"); $result = mysqli_query($connection, $query); Source: http://pastebin.com/raw.php?i=P11ULpYm