[Abagail]

You need to make sure you escape all user-provided strings(such as a username and password), don't rely on easily hackable data storing systems, salt and or hash user passwords, etc.

You need to do some research before making a system that will be used daily by all-kinds-of-people - some of which may not necessarily like your server - they may have some evil thoughts.