When creating a membership based site security is paramount - especially if you're dealing with personal information. When it comes to passwords you'll want to encrypt them wherever they are stored http://total-php.com/article/5/encrypting-passwords-using-php/