As you design and build a login form, keep it simple and avoid using a single After finding a valid username, the attacker could go on to guess the password..