<form action="http://www.loveforum.net/login.php?do=login" method="post" onSubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf, 0)">

I never really bothered to look until just now. How come SSL isn't being used? Or HTTPS? Is md5hash really secure?