[mab]

Using a fresh copy from the author's web site, I got it to login. Here are the values I used (everything was in the root directory for quick testing) -

Code:

var successpage = "jslogin2.html";
var loginpage = "jslogin1.html";

var imgSubmit = "crystal_on.jpg";
var imgReset = "crystal_off.jpg";

users[0] = new Array("mab","pwd","");

and (added ;return false near the end, which I believe you already had) -

Code:

  document.write('<tr><td align="center" colspan="2"><p><input type="image" src="'+imgSubmit+'" onclick="login(username.value,password.value);return false">');

It is not the use of a cookie login that is the problem, it is using code where the passwords are visable... There is probably a reason why the company's name is "laugh" land.