Ok... i've seen this a couple of times now.. someone please explain to me the point of base64 encoding parts of the page and saving them in hidden fields? It's not as if you can't decode, rewrite then re-encode that. Maybe it's just an Active Server thing?
Also, now I feel like an idiot for building Wordpress sites with custom themes and plugins for under a grand. Clearly I need to get me a government contract :/ .