Add user pages and use MD5 properly (hex encoding). Add SQL injection
vulnerability.