> if someone steals passwords out of your database then they already have all the access that my password to your site would've given I see where you are comin

> if someone steals passwords out of your database then they already have all the access that my password to your site would've given I see where you are coming from, however this premise is fatally flawed. If my password is stored in plain text then an attacker needs only to read just my password and they have access to my account. If the site is susceptible to SQL injection attacks it is perfectly reasonable that they can extract my password without having access to any other part of the database or system.