Potential leak of data: Simple Password

Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: $id = $_GET['id']; $host = "localhost"; $user = "root"; $password = "password"; $connection = mysql_connect($host, $user, $password); $db = mysql_select_db("yanille_gifts"); $query = mysql_query("SELECT * FROM rewards WHERE id=\"" . $id . "\""); $row = mysql_fetch_array($query); $used = $row['used']; if( Source: http://pastebin.com/raw.php?i=nfyZXEFc