Pw Ungehast in der DB

PHP Code:

			

<body>
             <div id="Felder">
            <form action="regi.php" method="post" >
            Benutzername<br />
            <input type="text" name="username" size="30"  /><br />
            Passwort<br />
            <input type="password" name="passwd" size="30" /><br />
            Passwort Wiederholen<br />
            <input type="password" name="passwd2" size="30" /><br />
            Name<br />
            <input type="text" name="rl_name" size="30"  /><br />
            Email<br />
            <input type="text" name="email" size="30" /><br />
            L�schcode<br />
            <input type="text" maxlength="7" name="social_id" size="30" /><br />
            <br />
            <input type="submit" name="submit" value="Register" />
            </form>
            </div>

</body>
</html>

<?php




        if(isset($_POST['submit']) && $_POST['submit'] == 'Register') {
                $username = mysql_real_escape_string($_POST['username']);
                $passwd = mysql_real_escape_string($_POST['passwd']);
                $passwd2 = mysql_real_escape_string($_POST['passwd2']);
                $rl_name = mysql_real_escape_string($_POST['rl_name']);
                $email = mysql_real_escape_string($_POST['email']);
                $social_id = mysql_real_escape_string($_POST['social_id']);

        if($passwd == $passwd2) {
                $sql = "INSERT INTO account SET login = '".$username."', password = '".$passwd."', real_name = '".$rl_name."', email = '".$email."', social_id = '".$social_id."'";
                $result = mysql_query($sql);

        if($result) { echo "<font color=\"green\"><b>Sie haben erfolgreich einen Account erstellt!</b></font>"; } else { echo "<font color=\"red\"><b>Registrierung Fehlgeschlagen!</b></font>"; }
                }
                    }

            ?>