Simple Password

Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*[“‘][a-z0-9\-_\!\$]+[“‘]': CT * FROM users WHERE username=".sqlesc($username)." ") or sqlerr(); $arr = mysql_fetch_assoc($res); $nick = ($username . rand(1000, 9999)); $id = $arr['id']; $wantpassword = "$nick"; $secret = mksecret(); $wantpasshash = md5($secret . $wantpassword . $secret); sql_query("UPDATE users SET passhash ='$wantpasshash' WHERE id=$id"); sql_query("UPDATE users S Source: http://pastebin.com/raw.php?i=98sr9J6K