use sha1 hashed password instead of cleartext password. take notice that this is not safe toogit add login.php