Keeping passwords in plain text has nothing to do with not using prepared statements. There may be a correlation between the two types of stupidity, though.