[chunky]

I'd assume the original site is using Javascript to simply add the password input tag so it submits both of them to the same php script.

Storing the first var in a session seems to be the easiest way if you don't want to use js. You may send me the original page so I can see how it's originally done.