##

use CGI;

my $q = CGI->new();

if (is_valid_login($q->param('user'),$q->param('password')) {
    print $q->redirect($q->param('returnurl'));
} else {
    print "Forbidden";
};