A good idea for the future revision is can the login for userid /pass be able to be put onto a https on a webserver?
Now days with only secure pop3 login, sftp or ftp ssl and dropping normal ftp, it seems we need to be able to offer a SSL login option.
Even if someone is on the plain http and hits login, the script can redirect the http login script off to the https server.
I don't think installing the entire UBB onto https makes sense, its just the userid /pass that you want to secure, so only the logins need SSL