Working on a public website where the login form is located on a separate page on it's own subdomain. One of our biggest goals at the moment is to try to promote users to log in to the site more frequently. My first suggestion was naturally that we should make the login form (username and pwd inputs) available directly from the header of the main site.
The guy responsible for the login system told me this was out of the question - since we have a lot of 3rd party scripts (ads etc) on the main site, it would be a security risk to have the login form accessible anywhere on the main page. The login must remain on a separate page where there are no 3rd party scripts. Displaying the login-page inside an iframe on the main site was not an option.
I trust him but just wanted to double check. Is there truly no way to have a secure site with 3rd party scripts and username+password inputs directly accessible on the page? Should any site with ads be considered unsafe if the login form is not on a separate page?