I just read an extremely funny article from the States about 'securing' websites using javascript, with the username, the password, and the 'secure' page URL written in the clear: 'So you hacked our site?!'.