password fixed in sql