Yesterday a colleague of mine told me that another colleague has done this in his web application for a subject:

For checking user and password, he did not query a database, but instead he checked information in a HIDDEN DIV in the html page.

Reason: "this way I don't lose my precious time".

I think of that and I'd like to punch him. People like him are the reason websites in Italy suck and my University web infrastructure sucks (he worked as intern on that).

My. God.