Curl - post form issue


Login or Register for Dates, Times and to Reply

 
Thread Tools Search this Thread
# 1  
Curl - post form issue

I'm having an issue with curl post form, I dont' understand what I'm mising. I would like to send a post command login/password to a form, quite simple in the paper.
URL : http: // <myebsite> / login

Here the form source code :

Code:
<form action="/login_check" method="post">    

<input type="text" id="username" name="_username" value=""/>      

<input type="password" id="password" name="_password" />      

<button type="submit">Connexion</button></form>


When I submit the form from Firefox, I got the http header :

Code:
http: // <mywebsite> /login_check
Host: <mywebsite>
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Referer: http: // <mywebsite> /login
Content-Type: application/x-www-form-urlencoded
Content-Length: 29
Connection: keep-alive
Cookie: PHPSESSID=qhr84cv2ecgmnmc1h5i31bf9f5
Upgrade-Insecure-Requests: 1
_username=test&_password=test
POST: HTTP/1.1 302 Found
Date: Wed, 30 Jan 2019 08:49:09 GMT
Server: Apache
X-Powered-By: PHP/5.4.37
location: http: // <mywebsite> /login
Content-Length: 405
Content-Type: text/html; charset=UTF-8
Age: 2
Connection: close
Cache-Control: no-cache
Via: 1.1 akamai (ACE 5.8.2/5.8.2)


http: // <mywebsite> /login
Host: <mywebsite>
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Referer: http: // <mywebsite> /login
Connection: keep-alive
Cookie: PHPSESSID=qhr84cv2ecgmnmc1h5i31bf9f5
Upgrade-Insecure-Requests: 1
POST: HTTP/1.1 200 OK
Date: Wed, 30 Jan 2019 08:49:10 GMT
Server: Apache
X-Powered-By: PHP/5.4.37
Content-Type: text/html; charset=UTF-8
Age: 0
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Via: 1.1 akamai (ACE 5.8.2/5.8.2)

So I wrote this command :

Code:
curl -v -d "_username=test&_password=test" -H "User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0" -H "Content-type: application/x-www-form-urlencoded" http: // <mywebsite> /login > curl.html

Here the verbose log :

Code:
* About to connect() to <mywebsite> port 80 (#0)
*   Trying <ip>... connected
* Connected to <mywebsite> (<ip>) port 80 (#0)
> POST /login HTTP/1.1
> Host: <mywebsite>
> Accept: */*
> User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0
> Content-type: application/x-www-form-urlencoded
> Content-Length: 42
>
} [data not shown]
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0    42      0   2593 --:--:-- --:--:-- --:--:--  2593* HTTP 1.0, assume close after body
< HTTP/1.0 200 OK
< Date: Wed, 30 Jan 2019 09:01:02 GMT
< Server: Apache
< X-Powered-By: PHP/5.4.37
< Set-Cookie: PHPSESSID=88vt4ekng0vb282me4b5jj4eb0; path=/
< cache-control: no-cache
< Connection: close
< Content-Type: text/html; charset=UTF-8
<
{ [data not shown]
101 11495    0 11495    0    42  83053    303 --:--:-- --:--:-- --:--:-- 93877* Closing connection #0

In curl.html, I have the current form, without notification of the error or the succeed, depending the login I use. It's like it does nothing.

Is it because of the redirection ? or that the submit button doesn't have an id ?

Any help would be appreciated Smilie

Thank you

Last edited by Fred13; 02-04-2019 at 04:50 AM..
# 2  
Your post request is:

Code:
POST: HTTP/1.1 302 Found

This means, more than likely, it cannot find this or there is an internal PHP error in that file.

Code:
<form action="/login_check" method="post">

Please post this file in red above and the file name on the server.

Also, post the last 25 entries from your PHP error log file.

Thanks.

Note, normally the action on the server should have an extension like:

Code:
<form action="/login_check.php" method="post">

Your server must know how to handle the request and without a file extension, this is not easy for the server to do Smilie
This User Gave Thanks to Neo For This Post:
# 3  
When I reach <mywebsite>/login_check, Im redirected to /login and I have a login error text.

Here the html code, got from curl mywebsite/login_check.

Code:
<!DOCTYPE html>
<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
        <meta http-equiv="refresh" content="1;url=http :// mywebsite /login" />

        <title>Redirecting to http :// mywebsite /login</title>
    </head>
    <body>
        Redirecting to <a href="http :// mywebsite / login">http : //mywebsite /login</a>.
    </body>
</html>

I do not own the server, it's an internal website in my enterprise.
# 4  
Fred13 ,

First of all, you cannot debug a web application if you do not have access to the web server files and log files.

Second, if you cannot provide me a copy of the exact file from the web server you are trying to access; and a copy of the PHP error log file, please post back on this topic when you have access to the files I requested.

Third, curl() is not going to help us or you debug the server side issue, so providing us a copy of the HTML output of your 302 redirect is not going to help.


If you do not have access to the file you are trying to send a post request to on the web server, I think you you should not be posting here trying to ask us to debug something you seem to be "hacking"..

Without access to the exact PHP file you are trying to access and access to error log messages, it is a waste of time to post these kind of questions here.

I'm closing this thread.

Please post back when you have full access to the web server and provide the files I requested.

Thanks.
This User Gave Thanks to Neo For This Post:
Login or Register for Dates, Times and to Reply

Previous Thread | Next Thread
Thread Tools Search this Thread
Search this Thread:
Advanced Search

10 More Discussions You Might Find Interesting

1. Web Development

CURL - Post Form Isssue ( sequel )

Hi, I write a new thread to discuss about my closed topic with new information ( /280990-curl-post-form-issue.html ) The previous post was closed because of missing informations, I didn't have access yet to server logs. ----------------------------------------------------------------------... (4 Replies)
Discussion started by: Fred13
4 Replies

2. Shell Programming and Scripting

Wget and curl to post data

i'm using this command to post data to a remote host: wget --post-data="My Data" http://<my-ip>:80 -O /dev/null -q and curl --data "My Data" http://<my-ip>:80 however, when i run the above, i see the following in my access log on the remote host: Wget: 10.10.10.10 - - "POST /... (1 Reply)
Discussion started by: SkySmart
1 Replies

3. UNIX for Beginners Questions & Answers

How to use cURL to download web page with authentification (form)?

Hello, I'm new in the forum and really beginer, and also sorry form my bad english. I use linux and want to create little program to download automaticaly some pdf (invoices) and put in a folder of my computer. I learn how to do and programme with ubuntu but the program will be implemented... (1 Reply)
Discussion started by: MarcelOrMittal
1 Replies

4. Shell Programming and Scripting

Curl command to post headers

I am trying post SOAP header from file to curl command. The curl command is curl -vk -H "$(cat curl-test1.txt)" -X POST https://xvcfvusdgfsd.sdfjd.gf/cmsws/CMSService The contet of curl file is POST: https://cmsuat.chrysler.com/cmsusws/CMSService HTTP/1.1 SOAPAction:... (1 Reply)
Discussion started by: dineshaila
1 Replies

5. Web Development

Data Post with curl

how to make the bash script ? http://server.com/mysql.php POST /mysql.php HTTP/1.1 Host: server.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:26.0) Gecko/20100101 Firefox/26.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language:... (1 Reply)
Discussion started by: iddfcr
1 Replies

6. Shell Programming and Scripting

Curl Script - Post a file (multipart/form-data)

Hi All, I am trying to post an xml file (utf-16 encoded) using curl to a REST service. The REST service is expecting 'multipart/form-data' content type. curl -k -i -H "Content-Type=multipart/form-data" -F "filename=@file.xml;type=text/xml" -X POST -u <username>:<password> <endPointURL> ... (0 Replies)
Discussion started by: Anooja G
0 Replies

7. Shell Programming and Scripting

Using cURL to submit a post form

I am trying to write a shell script to use curl in order to automate downloading data from a website. The URL with the post form is here: http://try-db.org/de/InfoBySpecies.php . I have a list of about 1800 different species I want to check. For Example, choose the first species and use the... (2 Replies)
Discussion started by: hansvg
2 Replies

8. UNIX for Dummies Questions & Answers

Posting data to a form using curl

Hello all. I have an incredible number of servers that I need to change a parameter on using a web interface. I'd like to be able to do this via curl, but I'm having some trouble. I filled out the form and hit update while snooping (tcpdump) my interface. That gave the the following as what is... (0 Replies)
Discussion started by: DeCoTwc
0 Replies

9. UNIX for Advanced & Expert Users

Issue in Curl to send http POST request with attachment/multipart

Hi, I am using curl to hit a url using http in solaris 10 using commandline, I want to transfer an attachment(using multipart curl -F) also as a part of the request. If anyone has used kindly help me with the syntax. I am using below command: Code: /usr/local/bin/curl -v... (1 Reply)
Discussion started by: manishmaha
1 Replies

10. Shell Programming and Scripting

maintaining form post session using curl

Hello, I have searched for a good part of the day, but cannot seem to find an answer to this. I hope this is an appropriate forum for my question. I am wanting to download a blog web page using a script. It requires username and password login. I have tried the following (an example) to no... (1 Reply)
Discussion started by: Allasso
1 Replies

Featured Tech Videos