Posting a comment on website !!

[cgworld]

PHP Posting a comment on website !!

Hello guys,
We have an Auto generated spam-protection like this:
post/comment/new/8/fid/12828237714c76565b983a8/atrty/1282823771/avrvy/0/key/cee8a8c9f46b964922fb12eedc60773c/#post_form

first time works, second no !

 

[litewarez]

<form action="http://google.com/search" name=f>
  <input autocomplete="off" maxlength=2048 name=q class="lst" title="Google Search" value="" size=57 />
  <input name=btnG type=submit value="Google Search" class=lsb onclick="this.checked=1">
</form>

just create a form with the same keys / values and inputs as the form on the site you wish to post to, and set the action to that site.

 

[cgworld]

Sorry but this can't be done because ... let me explain how the site works.
this is the blog address :

http://amir2download.mihanblog.com/

because its using java to pop-up the comment posting page you have to enter this into the browser url after the site is loaded :

javascript:newComment(10)

and then the page appears !!

now the problem is that the "action" is like this :

action="http://www.gamepack.mihanblog.com/post/comment/new/8/fid/12828237714c76565b983a8/atrty/1282823771/avrvy/0/key/cee8a8c9f46b964922fb12eedc60773c/#post_form

 

[sloddl]

<?php
the code which adds $_POST['name'] and $_POST['comment'] to your database.
?>
<form method="post">
<input name="name" />
<textarea name="comment"></textarea>
</form>

 

[cgworld]

Sorry but this is not related with my question !!

 

[Mr Happy]

They are using cookies, javascript and other protection to prevent this.

You could spend hours trying to bypass this and get nowhere. It's their form of capcha system

 

[litewarez]

if that site has CSRF Protection Mothods then you cant do this unless you have the CSRF Token thats generated per request.

regardless of Curl / post / forms etc, you need the form CSRF Token

 

[cgworld]

No problems. Done with VB.NET

 

[litewarez]

Show us your VB Post block of code, becuase im sure thats a CSRF Token.

/key/cee8a8c9f46b964922fb12eedc60773c/

 

[l0calh0st]

Yeah share the code! =)