password input removed from mysql script