[whatshisface]

Imagine I was running a charity that accepted donations by asking people to post their bank login credentials on a corkboard outside my house.

[ouid]

that's not really secure enough, you should require that they confirm how much they want you to withdraw as a line item next to their password.