check username/password

[generic]

for security you never should store plain password's in databases.
use a hash function with salt, please.