$hash = generateHash($postData['pass1'][$id]);
// Save password when set
- if (!empty($postData['pass1'][$id])) $add = sprintf(", password='%s'", SQL_ESCAPE($hash));
+ if (!empty($postData['pass1'][$id])) $add = sprintf(", `password`='%s'", SQL_ESCAPE($hash));
// Get admin's id
$adminId = getCurrentAdminId();