A słyszałeś o live HTTP headers ?
Nie mam tam konta, ale spójrz co ten plugin mi pokazuje:
Kod
http://www.zieloneimperium.pl/login.php?t
GET /login.php?t HTTP/1.1
Host: www.zieloneimperium.pl
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; pl; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: pl,en-us;q=0.7,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-2,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: ref=gowpl
HTTP/1.x 200 OK
Date: Sat, 11 Jul 2009 11:54:13 GMT
Server: Apache/1.3 (Unix) mod_ssl/2.8.28 OpenSSL/0.9.8f AuthPG/1.3 FrontPage/5.0.2.2635
X-Powered-By: PHP/5.2.8
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html
----------------------------------------------------------
http://www.zieloneimperium.pl/css.php
GET /css.php HTTP/1.1
Host: www.zieloneimperium.pl
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; pl; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)
Accept: text/css,*/*;q=0.1
Accept-Language: pl,en-us;q=0.7,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-2,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.zieloneimperium.pl/login.php?t
Cookie: ref=gowpl
Cache-Control: max-age=0
Ustaw odpowiedni refer i sprawdź co dokładnie jest przesyłane w momencie logowania