>Hi Joe - thanks for answering. That is a good idea, but how would
>I encrypt the user name?. Would I scramble the letters of
>the user name and have internal code that unscrambles when
>it is time to check the user database? thanks .. :)

Another way is to keep the USERS table readonly on the server. No encrypting is needed, but you must have authority to edit it yourself (or whoever is responsible for maintenance must)...