penggalan mib

        /* **************************** */
        //opening account page - as like as real user
        /* **************************** */
        curl_setopt($ch, CURLOPT_URL, "https://mib.bankmandiri.co.id/sme/common/login.do?action=menuWithNameRequest");
        $info = curl_exec($ch);

        curl_setopt($ch, CURLOPT_URL, "https://mib.bankmandiri.co.id/sme/front/transactioninquiry.do?action=transactionByDateRequest&menuCode=MNU_GCME_040201");
        $info = curl_exec($ch);
        echo $info; //berhasil tampil

        /* **************************** */
        //trick revealed, they used javascript post to activate the link
        /* **************************** */
$datapost = "transferDateDay1=1&transferDateMonth1=12&transferDateYear1=2016&transferDateDay2=22&transferDateMonth2=12&transferDateYear2=2016&transactionType=%25&dlAccountNo=0712320885999%5E+ARTHA+PRIMA%5EIDR%5EIDR%5E07004%5ES%5EKCP+Jkt+Krakatau+Steel&accountType=S&accountType=M&accountHierarchy=+&customFile=+&processAccountIndividually=Y&archiveFlag=N&frOrganizationUnitNm=&screenState=TRX_DATE&accountHierarchy=&archiveFlag=N&checkDate=Y&timeLength=31&showTimeLength=31&accountNumber=0712320885999&accountNm=+ARTHA+PRIMA&currDisplay=IDR&curr=IDR&frOrganizationUnit=07004&accountTypeCode=S&frOrganizationUnitNm=&language=FR";
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_URL, "https://mib.bankmandiri.co.id/sme/front/transactioninquiry.do?action=doCheckValidityAndShow&day1=1&mon1=12&year1=2016&day2=22&mon2=12&year2=2016&accountNumber=0712320885999&type=show&accountNumber=0712320885999&accountType=S&frOrganizationUnitNm=&currDisplay=IDR&day1=1&mon1=12&year1=2016&day2=22&mon2=12&year2=2016&trxFilter=%");
        curl_setopt($ch, CURLOPT_POSTFIELDS, $datapost);
        curl_setopt($ch, CURLOPT_POST, 1);
        $info = curl_exec($ch);
        echo $info;