function preventDefault(event) {
  if(event.preventDefault) event.preventDefault();
  else event.returnValue = false;
}

function auth(event, form) {
  preventDefault(event)
  var login = form.elements[0]
  var passwd = form.elements[1]
  var submit = form.elements[2]
  var badcred = document.getElementById('badcred')
  login.setAttribute('readonly', 'readonly')
  passwd.setAttribute('readonly', 'readonly')
  submit.setAttribute('disabled', 'disabled')
  badcred.style.visibility = 'hidden'
  var al = new AjaxLoader()
  al.load(form.action, function() {
    if(Number(al.responseText)) {
      location = '.'
    } else {
      badcred.style.visibility = 'visible'
      login.removeAttribute('readonly')
      passwd.removeAttribute('readonly')
      submit.removeAttribute('disabled')
    }
  }, 'login='+login.value+'&passwd='+passwd.value)
}