Webmail Login Script

[GrumWSmith.net]

While making a webmail login script, I've noticed that the .htaccess is virtually impossible to bypass by using a form (unless you fill in the values by hand on the popup, but that defeats the purpose) and was wondering if anyone had successfully made a script which all you need to do is enter the appropriate username and pass on the php page.

Does anyone have any ideas?

Thanks, Graham

[GrumWSmith.net]

Here's what I've came up with. It doesn't work properly yet, but it should. Doesn't work in IE, but works in Opera7.1

<?php 
$text = "<SCRIPT LANGUAGE=\"JavaScript\">
<!--
function openPage() {
var passWord = document.forms[\"LoginForm\"].passwordfield.value;
var userName = document.forms[\"LoginForm\"].usernamefield.value;
var system = document.forms[\"LoginForm\"].mail_system.value;
var newURL = \"http://\"+userName+\"+scottishexplorers.com:\"+passWord+\"@scottishexplorers.com:2095\"+system+\"\";
this.window.location=newURL;
}
//-->
</SCRIPT>
<div style=\"text-align:center\"> 
<form name=\"LoginForm\" enctype=\"application/x-www-form-urlencoded\" method=\"post\" action=\"\">
<table border=\"0\">
  <tr> 
    <td><input name=\"usernamefield\"; type=\"text\" class=\"tbox\" value=\"Username\" size=\"15\">
      </tr>
  <tr> 
    <td><input name=\"passwordfield\" type=\"password\" class=\"tbox\" value=\"Password\" size=\"15\"></td>
  </tr>
  <tr> 
    <td>Webmail: 
      <select class= \"tbox\" name=\"mail_system\">
        <option value=\"/horde/index.php\" selected>Horde</option>
        <option value=\"/neomail/neomail.pl\">Neomail</option>
      </select> </td>
  </tr>
  <tr> 
    <td><input onclick=openPage(); type=\"submit\" class=\"button\" name=\"Submit\" value=\"Submit\"></td>
  </tr>
</table>
</form>
</div>";
$ns -> tablerender("Webmail Login",$text); ?>