Er dette sikkert nok lavet?

Hej

Har jeg lavet det sikkert nok?

kode:

<?php

    if (empty($mail))
    {
    echo 'Du skal skrive din email';
    }
    else
    {
    $post_mail = mysql_escape_string($_POST['mail']);

    $password = substr(ereg_replace("[^A-Za-z2-9]", "", crypt(time())),0,10);
   
    $result_mail = mysql_query("SELECT mail FROM brugere WHERE mail = '$post_mail'") or die (mysql_error());
   
    $array_mail = mysql_fetch_array($result_mail);

    mysql_query("UPDATE brugere SET password=MD5('$password') WHERE mail='$post_mail'") or die (mysql_error());
       
    $query = mysql_query("SELECT * FROM brugere WHERE mail = '$mail'");
    while($row = mysql_fetch_array($query))
    {
    $pw = $row['password'];
    }
        if($array_mail['mail'] == $mail) {
        $msg = 'Dit nye password er: '.$password;
        $recipient = $array_mail['mail'];
        $subject = 'Password';
        mail($recipient, $subject, $msg);
        echo 'Password sendt!';
    }
    else
    {   
        echo 'Forkert mail';
    }
    }
?>