Oh sweet baby Jesus<p>Please learn about authentication, and password handling, and sessions.<p>TLDR: md5ing the hardcoded username + password and setting it in a cookie is basically asking to be hacked.<p>I literally got to line 30-something on the first file I looked at, and stopped reading.