Ver original$query_pass = sprintf("SELECT password, email FROM tb_usuarios WHERE email = '%s'", mysql_real_escape_string($_POST['email'], $link));