I've just built a CMFL application that accesses information held in a
database. One of the tables contains the user login names and passwords that
are checked through a login form before allowing the user access to the
protected pages that run the database queries.

After reading about password HASHING and protecting the user database from
dictionary attach I now confussed. My question is if some can get to the
database containing the hashed passwords thay have access to all the
information which is stored in the related tables. I'm obviously missing
something here and would appreciate any advice. By the way my prototype
application uses an MS Access database.