No matter what the input but my SHA1 / MD5 hashes are coming out to be the same. Any idea what may be wrong?

Here's my code --
$userpasshash = md5($userpass);
$sql = "INSERT INTO useraccount SET email = '$email', userpass = '$userpasshash', isactive = '0', ipaddress = '$ipaddress', joindate = '$joindate', geoloc= '$geoloc', fname = '$fname', lname='$lname'";
$dquery = &$db->query($sql);