User login applications can be quite simple, such as an application in which the administrator sets up a list of valid users. Anyone who tries to access a protected site is prompted to enter a username and password, which is checked against the list of valid users.