Mam na celu napisanie skryptu bramki orange multibox SSL.
Symulujac zapytania w pluginie live http headers na miom iceweasel i kochanym debianiku doszedlem do wniosku ze potrzebne sa jedynie dwa z wielu innych obecnych zapytañ cytujê je ponizej...
Wszelkich operacji dokonywalem na stworzonym do tego celu koncie w orange, jak latwo wyszukac w tresci zapytan:
login: metodykaLCA
pswd: metodyka
a tresc wyslanego przezemnie smsa to: AAAA-poczatek-A+Tresc+esemesa+qrna+++Z-koniec-ZZZZ
Zapytanie Logowania:
<?php <a href="https://www.orange.pl/portal/map/map/homep?_DARGS=/gear/static/home/login.jsp.loginFormId" target="_blank">https://www.orange.pl/portal/map/map/homep?...jsp.loginFormId</a> Host: www.orange.pl User-Agent: Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.8.1.1) Gecko/20061205 Iceweasel/2.0.0.1 (Debian-2.0.0.1+dfsg-2) Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5 Accept-Language: pl,en-us;q=0.7,en;q=0.3 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-2,utf-8;q=0.7,*;q=0.7 Keep-Alive: 300 Connection: keep-alive Referer: <a href="https://www.orange.pl/portal/map/map/" target="_blank">https://www.orange.pl/portal/map/map/</a> Cookie: mapProfileCookie=UAN/mAYsPArA/AnBejhK136H0BBM4dEQ; SID=4WFUJ4Y1QCE1ECQMIFUDBIQ; mapSecurityCookie=_ Content-Type: application/x-www-form-urlencoded Content-Length: 1118 _dyncharset=UTF-8&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.loginErrorURL=%2Fportal%2Fmap%2Fmap%2Fsignin&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.loginErrorURL=+&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.loginSuccessURL=http%3A%2F%2Fwww.orange.pl%2Fportal%2Fmap%2Fmap%2Fpim&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.loginSuccessURL=+&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.value.login=metodykaLCA&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.value.login=+&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.value.password=metodyka&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.value.password=+&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.login.x=11&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.login.y=5&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.login=+&_DARGS=%2Fgear%2Fstatic%2Fhome%2Flogin.jsp.loginFormId HTTP/1.x 302 Moved Temporarily Server: Sun-ONE-Web-Server/6.1 Date: Fri, 23 Feb 2007 12:18:05 GMT Content-Type: text/html Set-Cookie: mapSecurityCookie=dtWJ0fGly7eUPoKEFXhn7HGgHUXl; domain=orange.pl; path=/ Set-Cookie: mapProfileCookie=UAN/mAYsPArA/AnBejhK136H0BBM4dEQ; domain=orange.pl; expires=Sun, 27-May-2007 02:31:24 GMT; path=/ Location: <a href="http://www.orange.pl/portal/map/map/pim?_requestid=51203" target="_blank">http://www.orange.pl/portal/map/map/pim?_requestid=51203</a> Transfer-Encoding: chunked ?>
oraz
Zapytanie Wysylania smsa
<?php <a href="http://www.orange.pl/portal/map/map/message_box?_DARGS=/gear/mapmessagebox/smsform.jsp" target="_blank">http://www.orange.pl/portal/map/map/messag...box/smsform.jsp</a> POST /portal/map/map/message_box?_DARGS=/gear/mapmessagebox/smsform.jsp HTTP/1.1 ... Referer: <a href="http://www.orange.pl/portal/map/map/message_box?mbox_view=newsms&mbox_edit=new" target="_blank">http://www.orange.pl/portal/map/map/messag...p;mbox_edit=new</a> Cookie: mapProfileCookie=UAN/mAYsPArA/AnBejhK136H0BBM4dEQ; SID=4WFUJ4Y1QCE1ECQMIFUDBIQ; mapSecurityCookie=dtWJ0fGly7eUPoKEFXhn7HGgHUXl Content-Type: application/x-www-form-urlencoded Content-Length: 1396 _dyncharset=UTF-8&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.type=sms&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.type=+&enabled=false&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.errorURL=%2Fportal%2Fmap%2Fmap%2Fmessage_box%3Fmbox_view%3Dnewsms&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.errorURL=+&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.successURL=%2Fportal%2Fmap%2Fmap%2Fmessage_box%3Fmbox_view%3Dmessageslist&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.successURL=+&smscounter=1&counter=590&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.to=507366685&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.to=+&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.body=+&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.body=AAAA-poczatek-A+Tresc+esemesa+qrna+++Z-koniec-ZZZZ&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.create.x=53&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.create.y=18&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.create=Wy%C5%9Blij&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.create=+&_DARGS=%2Fgear%2Fmapmessagebox%2Fsmsform.jsp HTTP/1.x 302 Moved Temporarily Server: Sun-ONE-Web-Server/6.1 Content-Type: text/html Location: <a href="http://www.orange.pl/portal/map/map/message_box?mbox_view=messageslist&_requestid=59837" target="_blank">http://www.orange.pl/portal/map/map/messag...requestid=59837</a> X-Cache: MISS from ....... Via: 1.0 w3cache....... (squid/2.6.STABLE5) Connection: close ?>
Wiec naskrobalem cos takiego:
<?php // w formacie URL encoded $vars10="_dyncharset=UTF-8&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.loginErrorURL=%2Fportal%2Fmap%2Fmap%2Fsignin&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.loginErrorURL=+&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.loginSuccessURL=http%3A%2F%2Fwww.orange.pl%2Fportal%2Fmap%2Fmap%2Fpim&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.loginSuccessURL=+&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.value.login=metodykaLCA&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.value.login=+&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.value.password=metodyka&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.value.password=+&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.login.x=10&%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.login.y=9&_D%3A%2Famg%2Fptk%2Fmap%2Fcore%2Fformhandlers%2FAdvancedProfileFormHandler.login=+&_DARGS=%2Fgear%2Fstatic%2Fhome%2Flogin.jsp.loginFormId"; $vars20="_dyncharset=UTF-8&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.type=sms&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.type=+&enabled=false&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.errorURL=%2Fportal%2Fmap%2Fmap%2Fmessage_box%3Fmbox_view%3Dnewsms&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.errorURL=+&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.successURL=%2Fportal%2Fmap%2Fmap%2Fmessage_box%3Fmbox_view%3Dmessageslist&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.successURL=+&smscounter=1&counter=481&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.to=507366685&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.to=+&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.body=+&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.body=AAAA-poczatek-A+Tresc+esemesa+qrna+++Z-koniec-ZZZZ&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.create.x=42&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.create.y=12&%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.create=Wy%C5%9Blij&_D%3A%2Famg%2Fptk%2Fmap%2Fmessagebox%2Fformhandlers%2FMessageFormHandler.create=+&_DARGS=%2Fgear%2Fmapmessagebox%2Fsmsform.jsp"; //sprawdzam czy aby na pewno Curl zyje if (function_exists('curl_init') && function_exists('curl_exec')) { } else { } //logowanie $ch = curl_init(); curl_setopt($ch, CURLOPT_URL,"https://www.orange.pl/portal/map/map/homep?_DARGS=/gear/static/home/login.jsp.loginFormId"); curl_setopt($ch, CURLOPT_HEADER, 1); curl_setopt($ch, CURLOPT_AUTOREFERER, 1); curl_setopt($ch, CURLOPT_COOKIESESSION, 1); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_USERAGENT, $def['HTTP_USER_AGENT']); curl_setopt($ch, CURLOPT_POSTFIELDS, $vars10); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); // stadko opcji z ktorymi eksperymentowalem //curl_setopt($ch, CURLOPT_COOKIEJAR, 'cookie.txt'); //curl_setopt($ch, CURLOPT_COOKIEFILE, 'cookie.txt'); //curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1); //curl_setopt($ch, CURLOPT_POST, 1); //curl_setopt($ch, CURLOPT_CAINFO, "path:/ca-bundle.crt"); //curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); //curl_setopt($ch, CURLOPT_MAXREDIRS, 25); $a=curl_exec($ch); if (curl_errno($ch)) { } if (curl_error($ch)!="") { } curl_close($ch); //podzial stron //wysylanie $ch2 = curl_init(); curl_setopt($ch2, CURLOPT_URL,"https://www.orange.pl/portal/map/map/message_box?_DARGS=/gear/mapmessagebox/smsform.jsp"); curl_setopt($ch2, CURLOPT_HEADER, 1); curl_setopt($ch2, CURLOPT_AUTOREFERER, 1); curl_setopt($ch2, CURLOPT_COOKIESESSION, 1); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch2, CURLOPT_USERAGENT, $def['HTTP_USER_AGENT']); curl_setopt($ch2, CURLOPT_POSTFIELDS, $vars10); curl_setopt($ch2, CURLOPT_SSL_VERIFYPEER, 0); $b=curl_exec($ch2); if (curl_errno($ch2)) { } if (curl_error($ch2)!="") { } curl_close($ch2); ?>