Store the user and pwd in a table. Pass them to a stored procedure and return a 1 or 0, true or false, approved, failed, whatever.