MySQL :: MySQL 5.0 Reference Manual :: 12.12 Encryption and Compression Functions

Passwords or other sensitive values supplied as arguments to encryption functions are sent in plaintext to the MySQL server unless an SSL connection is used. Also, such values will appear in any MySQL logs to which they are written. To avoid ...

dev.mysql.com