function TheLogin() {

var password = 'chocology';

if (this.document.login.pass.value == password) {
  top.location.href="http://www.chocology.co.uk/cs/page.php?xPage=order.html";
}
else {
  location.href="http://www.chocology.co.uk/cs/page.php?xPage=incorrect.html";
  }
}