Hi

Usually, the password, which you send (mostly in plaintext..) from your
client, will be md5'd on server side. The md5-hash of the password
then is compared with the entry in the database.

If you send the md5-hashed version of your password, it will again
be md5'd, which results in a different md5-hash, hence the "invalid
password error".

The password is not stored as plain-text in the database for obvious
reason. Usually, you cannot do much if you somehow snatch the md5-
hash of a "good" password. Note, however, that md5-hashes of
short or simple passwords, like "12345" or "password" are known
by standard tools.

Cheers