passwort abfragen

/**
 * Set up global user vars.
 *
 * Used by wp_set_current_user() for back compat. Might be deprecated in the future.
 *
 * @since 2.0.4
 * @global string $userdata User description.
 * @global string $user_login The user username for logging in
 * @global int $user_level The level of the user
 * @global int $user_ID The ID of the user
 * @global string $user_email The email address of the user
 * @global string $user_url The url in the user's profile
 * @global string $user_pass_md5 MD5 of the user's password
 * @global string $user_identity The display name of the user
 *
 * @param int $for_user_id Optional. User ID to set up global data.
 */
function setup_userdata($for_user_id = '') {
	global $user_login, $userdata, $user_level, $user_ID, $user_email, $user_url, $user_pass_md5, $user_identity;


	if ( '' == $for_user_id )
		$user = wp_get_current_user();
	else
		$user = new WP_User($for_user_id);


	$userdata   = $user->data;
	$user_ID    = (int) $user->ID;
	$user_level = (int) isset($user->user_level) ? $user->user_level : 0;


	if ( 0 == $user->ID ) {
		$user_login = $user_email = $user_url = $user_pass_md5 = $user_identity = '';
		return;
	}


	$user_login	= $user->user_login;
	$user_email	= $user->user_email;
	$user_url	= $user->user_url;
	$user_pass_md5	= md5($user->user_pass);
	$user_identity	= $user->display_name;
}

$user_nicename = $_POST["ana"];
      $user_pass = wp_hash_password($_POST["pwa"]);
      // echo "<br>Passwort : ".$user_pass_md5;


      
      if ($_POST["ana"] == NULL || $_POST["pwa"] == NULL) {


        echo "<br>Der Benutzer oder das Passwort ist leer!";


      } else {
        
        $user_que = "SELECT user_login, user_pass_md5 
                       FROM wp_users 
                      WHERE user_nicename = '$user_nicename' 
                        AND user_pass = '$user_pass'";
        $user_er1 = mysql_query($user_que);
        $user_num = mysql_num_rows($user_er1);
              
        if ($user_num == 1) {


          echo "<br>Anmeldung war erfolgreich <a href='index.php'>Weiter</a>"; 
          $user_ins = "INSERT INTO wp_session (session) VALUES ('$sess_id');";
          $user_er2 = mysql_query($user_ins);


        } else {


          echo "<br>Der Benutzer ist nicht bekannt oder das Passwort ist falsch geschrieben!";


        }


      }