This still doesn't protect pages that much, since all it does is if the username is right, redirects you to another page.
So, i tried it on mrwebb's UBB, and after I logon it just takes me to Ultimate.cgi. So, now i can just go straight to Ultimate.cgi.
We should put more protection on this, like check the referer of the page you're trying to protect. Something like this can be used for that: