Did you encrypt pwd in sql table?