Of course you should never store plain text passwords. Have a look at this interesting discussion.
In reply to Re: login authentication by hdb in thread login authentication by window