Nice. I'd probably have settled for something simple like <form action="http://127.1/wp-login.php http://127.1/wp-login.php">. These days, you could serve a JS

Nice. I'd probably have settled for something simple like <form action="http://127.1/wp-login.php http://127.1/wp-login.php">. These days, you could serve a JS bitcoin miner instead.