Simple Password

Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*[“‘][a-z0-9\-_\!\$]+[“‘]': if(isset($_POST['login'])) { $username=$_POST["loguser"]; $password=($_POST["logpass"]); $encrypt=md5($password); $query="SELECT * FROM user WHERE username='$username' and password='$encrypt'"; $sql=mysqli_query($conn,$query); $check=mysqli_fetch_array($sql); if(mysqli_num_rows($sql)>0) { if($check['status']=='Active') { if($check['usertype']=='Member') { $_SESSION['username']="$username"; header(" Source: http://pastebin.com/raw.php?i=LumsDyiy