Untitled

<html>
	<head>
		<script type="text/javascript" src="md5.js"></script>

		<script type="text/javascript">
			function getCookie(c_name) {
				var i,x,y,ARRcookies=document.cookie.split(";");
				for (i=0;i<ARRcookies.length;i++) {
					x=ARRcookies[i].substr(0,ARRcookies[i].indexOf("="));
					y=ARRcookies[i].substr(ARRcookies[i].indexOf("=")+1);
					x=x.replace(/^\s+|\s+$/g,"");
					if (x==c_name) {
						return unescape(y);
					}
				}
			}

			function setCookie(c_name,value,exdays) {
				var exdate=new Date();
				exdate.setDate(exdate.getDate() + exdays);
				var c_value=escape(value) + ((exdays==null) ? "" : "; expires="+exdate.toUTCString());
				document.cookie=c_name + "=" + c_value;
			}

			function checkCookie() {
				var username=getCookie("username");
				var password=getCookie("password");
				if (username!=null && username!="") {
					alert("Welcome again " + username + " | " + password);
				}
				else {
					username=prompt("Please enter your name:","");
					if (username!=null && username!="") {
						setCookie("username",username,365);
					}
					password=prompt("Enter your password","");
					if (password!=null && password!="") {
						setCookie("password",MD5(password),365);
					}
					checkCookie();
				}
			}
			function checkLoginInfo() {
				var xmlHttp = null;
				try {
					// Mozilla, Opera, Safari sowie Internet Explorer (ab v7)
					xmlHttp = new XMLHttpRequest();
				} catch(e) {
					try {
						// MS Internet Explorer (ab v6)
						xmlHttp  = new ActiveXObject("Microsoft.XMLHTTP");
					} catch(e) {
						try {
							// MS Internet Explorer (ab v5)
							xmlHttp  = new ActiveXObject("Msxml2.XMLHTTP");
						} catch(e) {
							xmlHttp  = null;
						}
					}
				}
				if (xmlHttp) {
					counter++;
					xmlHttp.open('GET', '192.168.5.70/getvar.cgi?user=firstuser&pass=firstpassword', true);
					xmlHttp.onreadystatechange = function () {
						if (xmlHttp.readyState == 4) {
							contentString = xmlHttp.responseText + '';
							return "false";
						}
					};
					xmlHttp.send(null);
				}
				return "true";
			}

			function startSession() {
				user = document.LoginForm.username.value;
				pass = MD5(document.LoginForm.password.value);
				//insert cgi-function to check if login valid

				response = checkLoginInfo();
				if(response == "true") {
					setCookie("username",user,1);
					setCookie("password",pass,1);
					alert("WOOT");
					return "true";
				}
				else
					alert("WAPWAPWAAAP");
					return "false";
			}

		</script>
	</head>
	<body>
		<script>
			//checkCookie();
		</script>

		<form name="LoginForm">
			Username: <input type="text" 	name="username" /><br/>
			Password: <input type="password"name="password" /><br/>
			Submit:	  <input type="button"	value="Submit" onClick="startSession();">
		</form>

	</body>
</html>