Upon attempting to log in, I am greeted with a PHP page saying my login is invalid

image.png

image.png

Okay this one was way too easy. The credentials are right in plaintext in the js if you use the devtools.

secure.js XD

secure.js XD

I wonder if there are actually any production sites out there that are authenticating like this.

🤔