To start off, why are you hashing the password? The password in the settings file is plaintext unless you've created the has beforehand and used that as a password.
Because, to this PHP file can get any website user and it have all typing logs. If someone type correct password another person see it in log. Its only for security.