The OP does not want to connect through a web-interface, thus he has to sent the username and password to the database directly. (You may obfuscate this a bit, however)