This article explains how to control application access by validating the user's login and password against a database. Once validated, the IP address of the machine they are using is checked at the top of every page. What a given user can or can't do (that is, the security levels) is now handled easily.