On your registration form, you are sending passwords over plain http.

http://my.hackerbody.com/membership-account/membership-check...