--- a/includes/sessions.php	Mon Jul 09 15:30:22 2007 -0400
+++ b/includes/sessions.php	Mon Jul 09 22:01:27 2007 -0400
@@ -2385,6 +2385,7 @@
           {
             if(testpassed)
             {
+              var frm = document.forms.'.$form_name.';
               pass = frm.'.$pw_field.'.value;
               chal = frm.'.$challenge.'.value;
               challenge = hex_md5(pass + chal) + chal;