Untitled

<html>
<body>
<h3>CHECK MD5</h3>
<form method="post" id="getpass" action="/snir.php">
<input type="text" name="md5" size="120" value=''>
<input type="submit" name="Check" value='Check'>
<h3> ADD PASSWORD TO DB </h3>
<form id="addpass" method="post" action="/snir.php">
<input type="text" name="pass" size="120" value=''>
<input type="submit" name="Add" value='Add'>
</form>
</body>
</html>

<?php

//MY SQL Settings
$host= "localhost";
$user= "root";
$pass= "";
$dbname="passwords";


//SQL Connection
$con = mysql_connect($host,$user,$pass);
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
mysql_select_db($dbname, $con);

//SELECT PASSWORDS
$result = mysql_query("SELECT * FROM psw");

//LOOP ALL RESULTS
$found=0;
while($row = mysql_fetch_array($result))
{
	if(ISSET($_POST["md5"])&& md5($row['pass'])==$_POST["md5"])
	{
		$found=1;
		echo ("Result=");
		echo ($row['pass']);
		echo ("<br>");
	}
}

	if($found==0&&ISSET($_POST["md5"])&&$_POST["md5"]!=null)
		echo ("NOT FOUND");

if(ISSET($_POST["pass"])&&$_POST["pass"]!=null)
{
	$error=0;
	$result = mysql_query("SELECT * FROM psw");
	while($row = mysql_fetch_array($result))
	{
		if($row['pass']==$_POST["pass"])
		{
			$error=1;
			break;
		}
	}
	if($error==0)
	{
		$add = "INSERT INTO psw (pass) VALUES ('$_POST[pass]')";
		mysql_query($add,$con);
		echo "Added MD5=";
		echo md5($_POST["pass"]);
	}
	if($error==1)
	echo("ALLREADY IN DATABASE");
}

mysql_close($con);

?>