PHP : Hardcoded password