I can connect to the database with a valid username and with a false password. Why ? I think it isn't a wery good solution, because knowing the administrator's username will give all access to everybody.
Regards,
Csaba Erdei