nt,
you can check any forum software's user/pass with a query and knowing how to do it. how do you think they handle the login screen ?

we probably won't publish a howto here though

Well I know that but that is more my point. I've been around for a long time now in the computing World and there just isn't much that is secure if someone really wants to get it, but I've also come across more than my fair share of noobies basically fishing for ideas on how to crack other peoples passwords and I'm not going to tell them how even though it can be done.