[Mandrakke]

the only reason to you can login with any password is mysql_num_rows() returning -1 (this happens when the mysql couldn't connect to the database).

so, verify with OnQueryError callback which errors occurs when these querys are being executed.