Hi,
I have an Apache HTTPD 2.0.52, PHP 5, MySQL 4.1 (That I have no idea how to use...

) and OpenSSL on my server. I have an upload script, and currently for the authentication it's just a form and a PHP script that says:
if($_POST['user'] == "myuser")
{
if($_POST['pass'] == "mypassword")
{echo "
My upload form";}
}
I know this is not secure. Can you help my make it better?
Thanks,
Firewing1