The web interface that I have done actually parses and generates CS2D autoexec.cfg files containing the binds.
The password is stored as the first line in this file as an comment, and is stored in a folder named the username.
And then cs2d is executed with the -sys [username] option upon using the correct password.
If you wonder how you can have "health" left when you die, is because when the hit hook has finished executing, the text dosent get updated in time before the player actually are dead and no more text updates can be done.
But thats not something to worry about, since the health is always correctly displayed when you are alive.