Just writing a user loging script which sets a session variable once the user has logged in to give them access to the whole system. I was just wondering about security issues that might arise doing it this way and if there are any better way of doing it?