use md5 hash instead direct password
little fix SQLI