more password anti-disclosure

file.txt

@@ -0,0 +1 @@
+password ' ls -R

submit.php

@@ -23,7 +23,6 @@ $SURE = $_POST['sure'];
 // Sanitize variables
 $ACTION = escapeshellarg($ACTION);
 $USER = escapeshellarg($USER);
-$PASS = escapeshellarg($PASS);
 
 $RAND = mt_rand(100000, 999999);
 $PASSFILE = $RAND . '.pass';