url encoded now with base64, pos index changed to start from 1