Potential leak of data: Simple Password

Detected 2 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: _pic)) { $user_pic="<img src="$check_pic"width="100px"/>"; } else { $user_pic="<img src="$default_pic">"; } echo $id, $firstname, $birth_date; ?> 'SELECT user_id,email,first_name FROM user WHERE email_address='$email'AND password='$pass'LIMIT 1' $row = mysql_fetch_array($sql); Source: http://pastebin.com/raw.php?i=M9b68jZN