password encryption

i try all, error password incorret :/ pls help-meeee <?php $link = mysqli_connect("localhost", "***", "***"); $database = mysqli_select_db($link, "***"); $user = $_GET['username']; $password = $_GET['secret_key']; $password = hash('sha256', $_POST['password']); $hwid = $_GET['hwid']; $tables...

Am I correct assuming the password is stored in MySQL? What encryption is used? Would it be easy for an external program to access this password (running on server)?