一直以來以為http-get或 http-post 進行session請求，通常都會被攔截到login，而無法跳過驗證！

今天又仔細閱讀了“session驗證的基本原理” ，才知道原來是可以進行資料互動的，http請求示如下圖所示：

使用者登入以後，瀏覽器把使用者名稱和密碼提交到伺服器進行校驗，校驗通過以後伺服器會記錄key->value的sessionid的記錄mapping，同時瀏覽器會把sessionid記錄到cookie中，以後所有本域名下的請求都帶有該cookie 進行資料請求和登入驗證，所以要垮瀏覽器或者垮客戶端進行會話（session）保持則只需要加入cookie的驗證sessionid值，即可~

o(︶︿︶)o 唉，基礎知識很重要啊！

java 會話保持程式碼：

public class SessionGetInfo {
    //login sessionid cookie
    private static String cookie ="acw_tc=65c86a0c15390488435707740e37f71e9b554877da49da16f26c522bb9a76c; UM_distinctid=16689e05f954a-092d016c07e82d-454c092b-1fa400-16689e05f96270; JSESSIONID=F87E3D205CA534A31DB9EC0F17E026D6.jboss1; Hm_lvt_ef045bf50b01b351e1c52c334e160018=1539911479,1540001575,1540002882; token=eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxODY2MzEzMDYxNyIsImlhdCI6MTU0MDAwMjg4M30.bu2uqoDmOYyZh8OsrRQwWOTu01EbS8HxHRDISC5EOrfhQ37cS6RRxxPK4snU2JOIa-ns1fkgVbd3zv8m_nlj0w; Hm_lpvt_ef045bf50b01b351e1c52c334e160018=1540018627; CNZZDATA1260621316=910909643-1539911882-http%253A%252F%252Fapp.farmeasy.cn%252F%7C1540021991; SERVERID=e04a2a53c7a419899c5082cd401e516d|1540023544|1540002878";
    //verified URL
    private static String url ="http://app.cc.com?f=1&e=&d=0&s=-1";
    //get html
    public static void reqInfo(){
        try {
            String content = Request.Get(url)
                    .addHeader("Accept","*/*")
                    .addHeader("Cache-Control","max-age=0")
                    .addHeader("Connection","keep-alive")
                    .addHeader("Cookie",cookie)
                    .addHeader("Host","app.cc.com")
                    .addHeader("Upgrade-Insecure-Requests","1")
                    .version(HttpVersion.HTTP_1_1).execute().returnContent().asString();
             getUrls(content);
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
    //parse html get a tag href
    public static void getUrls(String html){
        System.out.println(html);
    }
    //main
    public static void main(String args[]){
        reqInfo();
    }
}
 

php 會話保持程式碼:

<?php

//login sessionid cookie
$cookie="acw_tc=65c86a0c15390488435707740e37f71e9b554877da49da16f26c522bb9a76c; UM_distinctid=16689e05f954a-092d016c07e82d-454c092b-1fa400-16689e05f96270; JSESSIONID=F87E3D205CA534A31DB9EC0F17E026D6.jboss1; Hm_lvt_ef045bf50b01b351e1c52c334e160018=1539911479,1540001575,1540002882; token=eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiIxODY2MzEzMDYxNyIsImlhdCI6MTU0MDAwMjg4M30.bu2uqoDmOYyZh8OsrRQwWOTu01EbS8HxHRDISC5EOrfhQ37cS6RRxxPK4snU2JOIa-ns1fkgVbd3zv8m_nlj0w; Hm_lpvt_ef045bf50b01b351e1c52c334e160018=1540018627; CNZZDATA1260621316=910909643-1539911882-http%253A%252F%252Fapp.farmeasy.cn%252F%7C1540021991; SERVERID=e04a2a53c7a419899c5082cd401e516d|1540023544|1540002878";
//verified URL
$url="http://app.cc.com?f=1&e=&d=0&s=-1";
//request method
function reqInfo(){
	$opts = array(
		'http' => array(
			'method' => 'GET', 
			'header' => 'Content-type: application/x-www-form-urlencodedrn' ,
			'cookie' => $cookie
		)
	);
	$context = stream_context_create($opts);
	$html = file_get_contents($url, false, $context);
	echo $html;
}
//request
reqInfo();