use php to act password validation