A login script on a server that won't allow it to accept POST requests? That sounds like really sloppy work on the part of the server administrator.
Okay, if it won't accept POST requests then we can only hope it will accept GET requests. Tack the $data onto the end of the URL being requested (use a ? to separate it from the rest of the URL, of course). Obviously, dropping the cURL POST options will also be necessary.