精易论坛

标题: POST登陆问题 [打印本页]

作者: 想学易 时间: 2012-8-14 17:33
标题: POST登陆问题
POST登陆本论坛，抓到的包有两个POST，第二个是安全问题的。问题我都用红色字体标记出来了，就是红色的那两个值不知道怎么来的，怎么处理？
第一次POST的数据包在下面：
POST /member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes&inajax=1 HTTP/1.1
Accept: application/x-shockwave-flash, image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.3600gz.cn/./
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) )
Host: www.3600gz.cn
Content-Length: 99
Connection: Keep-Alive
Cache-Control: no-cache
username=%CF%EB%D1%A7%D2%D7&password=6db80f4766a8ce6a069404b1c5398799&quickforward=yes&handlekey=ls
第二次POST的数据包在下面：
POST /member.php?mod=logging&action=login&loginsubmit=yes&handlekey=login&loginhash=L1nKF&inajax=1 HTTP/1.1
Accept: application/x-shockwave-flash, image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.3600gz.cn/./
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) )
Host: www.3600gz.cn
Content-Length: 240
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: BJgu_fdd3_saltkey=5XZ6xdp6; BJgu_fdd3_lastvisit=1344931888; BJgu_fdd3_sid=fePQfe; BJgu_fdd3_lastact=1344935489%09member.php%09logging; PHPSESSID=1qut47279van30uroj3p7gqsb3
我想问的问题在红色部分，红色的值每次都会变的。怎么搞定它啊？
formhash=c95460cb&referer=http%3A%2F%2Fwww.3600gz.cn%2F.%2F&auth=be91MPbqMt57paIOIxsmI9SOJJsstqGjpevJZTo6iNpNdc4Fuvl1IDgGUNvKvdXJCTujfU1X%2BbaUBUATMx5019ksyzkpCw&questionid=1&answer=%B3%C2&loginsubmit=%3CSTRONG%3E%B5%C7%C2%BC%3C%2FSTRONG%3E

作者: 疯狂的马籽 时间: 2012-8-14 17:39
提示: 作者被禁止或删除内容自动屏蔽

作者: 沉默じ亦素顏ジ 时间: 2012-8-14 17:45
不懂什么意思啊- 不厉害啊

作者: haozi99 时间: 2012-8-14 17:47
http://www.3600gz.cn/thread-120126-1-1.html
formhash的看这里

欢迎光临精易论坛 (https://125.confly.eu.org/)