removed root password from var check function