I know there are a view posts on this topic around already, but they never answered my qestion.

The problem I am having is how to make sure that nobody can view the password/user-database? If I use CDML to get the information and compare the users entries, anybody who has a look at the source-code will see the name of the database and the name of the fields and therefor be able to view the contents of the database. Or am I wrong there?

I know how to set up access privileges, but I can't really password-protect the view-privilege, as I need them to compare the password and username entered by the user.

HA! I found the helpfile on the Web Security Database. I'll work through that and see how it goes. It sounds like it will solve all my problems in life!