yes, there seems to be a base64.js that I suspect is doing it, is
there a way to have curl use javascripts ?
Thanks

> I'm speculating here, but there's a chance that the "encoded_pw=" value
> is generated within the browser with some JavaScript code. I've seen some
> sites doing RC4 in JavaScript to encrypt a password before sending it to the
> server on an unencrypted channel. You need to log the entire login sequence
> from start to finish and study it to see what data is being passed at what
> stage.
Received on 2006-04-12