Ehm, if you never worked with security before, do you really think it's a good idea to implement everything yourself, instead of using what's available in your webserver?

Abigail