function Login(){ var done=0; var username=document.login.username.value; username=username.toLowerCase(); var password=document.login.password.value; password=password.toLowerCase(); if (username=="tshm" && password=="thebigpicture") { window.location="image_download.shtm"; done=1; } if (username...

Looks like I can steal images WITHOUT disabling JavaScript! This is even worse than the JavaScript on-click alert script you see everywhere. And people actually pay for this kind of crap?