php curl帶有csrf-token驗證模擬提交方法
阿新 • • 發佈：2019-02-04
通常為了安全會在表單里加入一個隨機的token值來防止csrf攻擊。
要想模擬提交有token驗證的網站其實也不難。
1.通過正則獲取token
2.帶上獲取到的token模擬提交
下面是一個成功的例子
目錄結構
│ form.php –需要模擬的表單
│ getForm.php – 模擬提交程式
│ post.php –表單驗證程式
│
└─cookie – cookie存放目錄
getForm.php
<?php
$cookie_file = './cookie/'.time().'.cookie';
$str form.php
<?php
session_start();
$_SESSION['token'] = md5($_SERVER['REQUEST_TIME']);
$_SESSION['time'] = date("Y-m-d H:i:s");
session_write_close();
//echo $_SESSION['auth'];
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title> new document </title>
<meta name="generator" content="editplus" />
<meta name="author" content="" />
<meta name="keywords" content="" />
<meta name="description" content="" />
</head>
<body>
<form action="post.php" method="post">
<p><input name="name" type="text"></p>
<p><input name="password" type="password"></p>
<p><input name="token" type="hidden" value="<?php echo $_SESSION['token']?>"></p>
<p><input type="submit"></p>
</form>
</body>
</html>post.php
<?php
session_start();
if(empty($_POST['token']))
{
exit ("token is empty!");
}
if(empty($_SESSION['token']))
{
exit ("session is empty");
}
if($_POST['token'] != $_SESSION['token'])
{
exit ("token ");
} else
{
unset($_SESSION['token']);
}
echo PHP_EOL;
echo "pass";
print_r($_REQUEST);
echo PHP_EOL;
print_r($_SERVER);