And i forgott.

You should not put your users password in a SESSION variable unless you have a very strong reason and a way to encrypt it so if it ends up in someone elses hands they have no use for it.

__________________
Of course the whole point of a doomsday machine, would have been lost if you keep it a secret.