频道导航

php模拟post行为代码总结(POST方式不是绝对安全）

2018-12-30 PHP 前端之家

前端之家收集整理的这篇文章主要介绍了php模拟post行为代码总结(POST方式不是绝对安全），前端之家小编觉得挺不错的，现在分享给大家，也给大家做个参考。

这里提供两种方法供选择：第一：手写代码。第二：利用HttpClient PHP类库
　　第一种方法：
<div class="codetitle"><a style="CURSOR: pointer" data="75881" class="copybut" id="copybut75881" onclick="doCopy('code75881')"> 代码如下:

<div class="codebody" id="code75881">
<？PHP
$flag = 0;
//要post的数据
$argv = array(
'var1'=>'abc',
'var2'=>'你好吗');
//构造要post的字符串
foreach ($argv as $key=>$value) {
if ($flag!=0) {
$params .= "&";
$flag = 1;
}
$params.= $key."="; $params.= urlencode($value);
$flag = 1;
}
$length = strlen($params);
//创建socket连接
$fp = fsockopen("127.0.0.1",80,$errno,$errstr,10) or exit($errstr."--->".$errno);
//构造post请求的头
$header = "POST /mobile/try.PHP HTTP/1.1";
$header .= "Host:127.0.0.1";
$header .= "Referer:/mobile/sendpost.PHP";
$header .= "Content-Type: application/x-www-form-urlencoded";
$header .= "Content-Length: ".$length."";
$header .= "Connection: Close";
//添加post的字符串
$header .= $params."";
//发送post的数据
fputs($fp,$header);
$inheader = 1;
while (!feof($fp)) {
$line = fgets($fp,1024); //去除请求包的头只显示页面的返回数据
if ($inheader && ($line == "n" || $line == "")) {
$inheader = 0;
}
if ($inheader == 0) {
echo $line;
}
}
fclose($fp);
?>

　　第二种方法是：使用httpclient类
<div class="codetitle"><a style="CURSOR: pointer" data="67595" class="copybut" id="copybut67595" onclick="doCopy('code67595')"> 代码如下:

<div class="codebody" id="code67595">
$pageContents = HttpClient::quickPost('http://example.com/someForm',array(
'name' => 'Some Name',
'email' => 'email@example.com'
));

　　使用httpclient类库，可以去官方下载最新的类库，官方地址为：http://scripts.incutio.com/httpclient/index.PHP
　　附加一些点PHP httpclient的其他几个用法
　　静态方法获取网页：
<div class="codetitle"><a style="CURSOR: pointer" data="45569" class="copybut" id="copybut45569" onclick="doCopy('code45569')"> 代码如下:

<div class="codebody" id="code45569">
$pageContents = HttpClient::quickGet('http://bankcha.com')

　　Get方法获取
<div class="codetitle"><a style="CURSOR: pointer" data="85090" class="copybut" id="copybut85090" onclick="doCopy('code85090')"> 代码如下:

<div class="codebody" id="code85090">
$client = new HttpClient('bankcha.com');
if (!$client->get('/')) {
die('An error occurred: '.$client->getError());
}
$pageContents = $client->getContent();
　　带调试的Get方法获取
　　PHP 代码
$client = new HttpClient('bankcha.com');
$client->setDebug(true);
if (!$client->get('/')) {
die('An error occurred: '.$client->getError());
}
$pageContents = $client->getContent();
　　带自动转向的Get方法
　　PHP 代码
　　$client = new HttpClient('www.bankcha.com');
$client->setDebug(true);
if (!$client->get('/')) {
die('An error occurred: '.$client->getError());
}
$pageContents = $client->getContent();
　　检查页面是否存在
　　PHP 代码
$client = new HttpClient('bankcha.com');
$client->setDebug(true);
if (!$client->get('/thispagedoesnotexist')) {
die('An error occurred: '.$client->getError());
}
if ($client->getStatus() == '404') {
echo 'Page does not exist!';
}
$pageContents = $client->getContent();
　　伪造客户端
　　PHP 代码
$client = new HttpClient('bankcha.com');
$client->setDebug(true);
$client->setUserAgent('Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.3a) Gecko/20021207');
if (!$client->get('/')) {
die('An error occurred: '.$client->getError());
}
$pageContents = $client->getContent();
　　登录验证并请求一个网页
　　PHP 代码
$client = new HttpClient('bankcha.com');
$client->post('/login.PHP',array(
'username' => 'Simon',
'password' => 'ducks'
));
if (!$client->get('/private.PHP')) {
die('An error occurred: '.$client->getError());
}
$pageContents = $client->getContent();
　　HTTP授权
　　PHP 代码
$client = new HttpClient('bankcha.com');
$client->setAuthorization('Username','Password');
if (!$client->get('/')) {
die('An error occurred: '.$client->getError());
}
$pageContents = $client->getContent();
　　输出头信息
　　PHP 代码
$client = new HttpClient('bankcha.com');
if (!$client->get('/')) {
die('An error occurred: '.$client->getError());
}
print_r($client->getHeaders());
　　设置一个域内重定向最多次数
　　PHP 代码
$client = new HttpClient('www.bankcha.com');
$client->setDebug(true);
$client->setMaxRedirects(3);
$client->get('/');

PHP fsockopen 伪造 post和get方法
fsockopen 伪造 post和get方法哦，如果你正在找伪造 post和get方法的PHP处理代码这款不错哦。
<div class="codetitle"><a style="CURSOR: pointer" data="66527" class="copybut" id="copybut66527" onclick="doCopy('code66527')"> 代码如下:<div class="codebody" id="code66527">
<?PHP
//fsocket模拟post提交
$purl = "http://localhost/net PHP/test2.PHP?uu=rrrrrrrrrrrr";
print_r(parse_url($url));
sock_post($purl,"uu=55555555555555555");
//fsocket模拟get提交
function sock_get($url,$query)
{
$info = parse_url($url);
$fp = fsockopen($info["host"],3);
$head = "GET ".$info['path']."?".$info["query"]." HTTP/1.0rn";
$head .= "Host: ".$info['host']."rn";
$head .= "rn";
$write = fputs($fp,$head);
while (!feof($fp))
{
$line = fread($fp,4096);
echo $line;
}
}
sock_post($purl,"uu=rrrrrrrrrrrrrrrr");
function sock_post($url,3);
$head = "POST ".$info['path']."?".$info["query"]." HTTP/1.0rn";
$head .= "Host: ".$info['host']."rn";
$head .= "Referer: http://".$info['host'].$info['path']."rn";
$head .= "Content-type: application/x-www-form-urlencodedrn";
$head .= "Content-Length: ".strlen(trim($query))."rn";
$head .= "rn";
$head .= trim($query);
$write = fputs($fp,4096);
echo $line;
}
}
?>

post post