To prevent something like this, I use a blowfish encryption algorithm to encrypt data stored in a user table. If the user finds a way to open it, they just see gibberish.
Encryption password and etc. are stored in the code, so not accessible (or at least nowhere near as easy).
This can cause...