[GTLS]

Its simple, as others suggested, use strcmp function to check your name OnPlayerConnect. if it returns -1, then show Secret Password box after he is successfully logged in. else, normally spawn the player.

Also, a suggestion, why do you want to ban who tries to login your account? if he fails to provide secret password, just kick him. otherwise people will get you banned again and again...