--- a/includes/sessions.php	Fri Jul 06 11:45:50 2007 -0400
+++ b/includes/sessions.php	Tue Jul 10 00:40:52 2007 -0400
@@ -2385,6 +2385,7 @@
           {
             if(testpassed)
             {
+              var frm = document.forms.'.$form_name.';
               pass = frm.'.$pw_field.'.value;
               chal = frm.'.$challenge.'.value;
               challenge = hex_md5(pass + chal) + chal;