md5 added, sql updated with md5, fix bug var missing