in sql server you can use ' or ''=' each field of username and pass

http://www.javascripts.com you can find so much sample about right ****
okey

when you use below will not display
****.getElementById(span).style.display=='none'

whan you use it you can see your span tag
****.getElementById(span).style.display==''

an use input **** properties or span, send that your function
ok

Use some javascript for right **** disable and when your page open send another window and dont use it navgation bar like file, edit,view etc. okey?
it is just solution...
another i dont know