Potential leak of data: Simple Password

Detected 2 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: ysql_fetch_assoc($sql); $user = mysql_query("SELECT * FROM users WHERE (username = '$username' OR email = '$email') AND password = '$password'"); $user = mysql_query("SELECT * FROM users WHERE (username = '$login_name' OR email = '$login_name') AND password = '$password'"); <form action="login.php" method="post"> Username* <br/><input type="text" name="login_username" /><br/> Password* <br/><input type="password" name="login_pass" /><br/> […]