Potential leak of data: Simple Password

Detected 2 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: l_escape_string($_POST['username']); $password=mysql_real_escape_string($_POST['password']); $passWord=md5($password); // Encrypted Password //*********retrieving data from Database********** $query = "select * from users where userName='$userName' and passWord='$passWord'"; $res = mysql_query($query); $rows = mysql_num_rows($res); //**********if $userName and $passWord will match database, The above function //**********will return 1 row if($rows==1) //***if the userName and password matches then register a […]