Potential leak of data: Simple Password

Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: > <?php session_start(); $host = "xxxx"; $db = "xxxx"; $user = "xxxx"; $pass = "xxxxx"; $conn = new PDO("mysql:host=$host;dbname=$db",$user,$pass); ?> <?php session_start(); $who = $_SESSION['who']; $host = "xxx"; $username = "xxxx"; $password = "xxxx"; $db = "xxx"; @mysql_connect(:host,:username,:password); $q = $conn->prepare($sql); $q->bindValue(':host',$host,PDO::PARAM_STR); $q->bindValue(':username',$username,PDO::PARAM_STR); $q->bindValue(':password',$password,PDO::PARAM_STR); $q->execute(); Source: http://pastebin.com/raw.php?i=kXr4ssay