Potential leak of data: Simple Password

Detected 3 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: ( "successCode" => 0 ); if (($user_login) && ($password)) { //Connect to the database to fetch the users username and password $select_user = mysql_query("SELECT username,password FROM users WHERE username='$user_login' AND password='$pass_login'"); $user_rows = mysql_fetch_array($select_user); $username_row = $user_rows['username']; $password_row = $user_rows['password']; if(($username_row==$user_login) && ($md5_pass==$password_row)) { //All user info Source: http://pastebin.com/raw.php?i=07X98ZCi