Где происходит проверка пароля ?

 
                $sql    = "SELECT *
                           FROM cms_users
                           WHERE $where_login AND password = md5('$passw') AND is_deleted = 0 AND is_locked = 0";
                $result = $inDB->query($sql);
                if($inDB->num_rows($result)==1) {