Ksiwhxishjdidhekajidhcjdhdisgvsbskdibdvdk

Why can't both be right?

A friend found a terrible website once. It was a tiny college store website. Mostly used so the employees had a way to download their schedule.

The login was pure javascript. Inspecting the code, you could see there was a 'click' event when you submitted the login.

I shit you not, the event was something along the lines of "if ( input_login.value = 'username' && input_password.value = 'password' ) { /* logged in */.... }". These were real credentials.

@nitnip LOL that's pretty bad

If the back end is Node.JS, this isn't bad, it's trendy.