Security fix about passwords (--")
Use in_array instead of OR