$ 0 0 Use SSL and don't use cookie to store password the rest is the matter of backend auth implementation.Also, use input with type="password" =)