Pierluca De Santis

The issue concerns the login interface, which discloses passwords by allowing access to an "if(pwd ==" line in the HTML source code. This effectively means that authentication occurs only on the client side.