Small nitpick: the customers will feel the pain if their username/password is leaked through SQL injection.