Website security

how would you go about designing and implementing a security system for a website that only uses a password in a db for authenticating a user?

any ideas/suggestions will help