How to Hack a Website in Four Easy ... Recently a hacker posted a list of 5,000 websites online which were vulnerable ... if you are looking for files stored on websites containing passwords, ...

And don't actually store the password in a variable—again, this only works if you trust the user's computer isn't compromised (although that's all true for validating against a server too).