For the moment we have a server and a db for alpha development.
Everyone can develop on it and everyone can acces anyones files...
Then we got the production server with db.

As you seem to NOT have strong right-checking policy, here is my suggestion :

Put the CVS server on the test server, use an 'autoexport feature' (triggered by the loginfo file)
to maintain an exact working copy of your repository on your test server.
I'd suggest to make modules based on directories. (to benefit of the 'autoexport')

When everything is ok, all you'll have to do, is to 'scp' (you read well ! not 'ftp' !) the files to the prod server...

"Only Bad Coders Badly Code In Perl" (OBC2IP)