What can I say about this script?.. It's pretty hard to work out because the Password and URL to where this script goes to has all been encrypted.

Some notes worth mentioning about this script..

There are no numbers or 'funny' characters in either the password or URL.

The encrypted password & URL for the User 'The Sandman' is stored here:
<OPTION value="6025681284,953216,MSILH.LWNS">

The encrypted password & URL for the User 'The Seeker' is stored here:
<OPTION value="860818431,418373,MWMJH.OUTR">

MWMJH.OUTR  <---This is the encrypted URL, notice the (dot) followed by four letters,
                         <--  this is a good indication that it belongs to the filename, can you see that
                         <--- the filename ends with something like .html
                         <--- Looking at this we can see that the actual filename is just 5 letters long.

Hash code systems tend to be of the fixed length variety, however this one is variable length and while most hash systems are collision free, this one isn't.

There are two hash functions applied to the same encrypt key.