The example given was only to illustrate how the player would 'connect' to his account, through inside the game.
My initial thought was not to use anything between the database on my webserver and the program(game) itself (besides the plugin which contains the funcion to propper conection).
It would be just like going to hotmail.com put your username and password.
Was just to illustrate.

And since its just a prototype game, that the database only holds the players score and download new missions or messages that I´ll feed the database. Nothing fancy or personal info.

I never got too deep inside security in web applications but now that you told me that, so how ANY game or app that connects to a server only to know if there is or not a update or a simply 'hi webserver I have just logged in, bye' ?