That's not how I remember it. There was a lot of
if (md5($_POST['password'])) == password_col) // success!