site should connect to intermediate which in turn issues commands to bitcoind:

site connects to:

intermediate (either on separate or bitcoind server): sanitize inputs (reject sending more than x BTC for instance) and issue walletunlock

bitcoind