Potential leak of data: Simple Password

Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: ); if($select) { $user = mysql_escape_string($_POST["username"]); $pwd = mysql_escape_string($_POST["password"]); $GetRows = mysql_query("SELECT * FROM users WHERE username='$user' AND password='$pwd'"); $RowCount=mysql_num_rows($GetRows); if($RowCount>0) { die("Correct !"); } else { die("Incorrect !"); Source: http://pastebin.com/raw.php?i=csUnkL1w