Potential leak of data: Simple Password

Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: sqli2"]; if (empty($token) || !check_token($token)){ echo "<h1>You need to be logged in!</h1><br>"; // header("location: http://google.it"); } if (!empty($user) && !empty($pwd)) { $query = "SELECT user_id FROM users WHERE username='$user' and password='$pwd'"; $result = mysqli_query($vuln_db,$query); if ($result && mysqli_num_rows($result)>0) { echo "Hi $user, you are logged in."; verify_user($token, $user); } else […]