Potential leak of data: Simple Password

Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: password']; $newPassword = $_POST['newPassword']; $oldPassword = $_POST['oldPassword']; mysql_select_db("users", $conn); if(isset($_POST['update'])) { $update = "UPDATE users SET Password='$newPassword' WHERE Password='$_POST[hidden]'"; mysql_query($update, $conn); $_SESSION['password'] = $newPassword; } $result = mysql_query($update, $conn); if(!$result){ echo mysql_error(); exit; } mysql_query($update, $c Source: http://pastebin.com/raw.php?i=ajQwGN1h