[Konstantinos]

pawn Код:

WP_Hash(hashPassword, 129, password);

You do have Whirlpool but you don't use the hashed password (which was stored in hashPassword) anywhere. It'd be better to be a local string though.

Take a look:

pawn Код:

SaveToMysql(password);
mysql_real_escape_string(password, Escape[1]);

You escape the password and you pass it as an argument to the query when you should've used the hashed password instead.