POST response location problem

theoden

Hi y'all,

Bit of a problem here (duh 🙂

My ISP requires me to login to their webmail system (squirrelmail) using username@domain + password. For certain reasons, I want the @domain part to be hidden, so I've thrown together a little php snipplet to work between the login form and the webmail app.

Basically it puts the username from the form input together with the domain and then posts the resulting username@domain + password combination to the webmail app as such:

fwrite($fp, "POST $path HTTP/1.1\n");
fwrite($fp, "Host: $host\n");
fwrite($fp, "Content-Length: $qlen\n");
fwrite($fp, "Content-Type: application/x-www-form-urlencoded\n");
fwrite($fp, "Connection: Close\n");
fwrite($fp, "\n");
fwrite($fp, "$query\n");

Then I catch the response with fgets and print it to the browser and all is good. Or should be 🙁

Now initially this seems to work swell. Redirect.php indeed redirects me to webmail.php instead of throwing a login error. However, it redirects me to webmail.php on the server on which my in-between-script is running, instead of webmail.php on the target server, effectively returning a 404 to my browser.

Any thoughts on how to fix this/alternatives to get done what I'm looking for? I'm sure there's some javascript solution for putting the username and domain together onsubmit of the original form, but I gave that up a while ago lol. Also replacing things like path or location in the server response didn't do me much good either, seems I'm missing some variables after all.

I just know I'm going the long way around to get this done 🙁

Any help would be gravely appreciated.

amcgrath

OK, lemme see if i've got this straight:

You want to have a form on your local system that posts to your isp's webmail program? I think I kinda know what you are doing, but it isn't altogether very clear from your post. Gimme some more info (code would help) and I'll see what I can do.

amc

Code_guy

As I understand, your browser conects to your local server, which connects to your ISP's server and sends it a login form ($query), which I assume is hardcoded in your php code, and is never displayed. You catch the response from your isp's server and forward it as is to your browser which is connected to your local server and interprets url's relative to your local domain.
If you got this all working, all you need to do is parse the response page and add a <base> tag to the head:
<BASE href="http://www.myisp.com/>

or if all the page does is redirect, you can junk the page and redirect the browser your self by sending a meta
...

much simpler to write a html page with a form with hidden fields and submit it onload

theoden

Lol sorry if that wasn't too clear, thanks to all bearing with me 😛

What I want to do is combine the username which is inputted through the form on my server, with a hidden field containing @domain. This combination, let's call it "login" is then posted together with the password and some other variables to the server running the webmail app as such:

$fp = fsockopen($host, 80 );
if ( $fp )
{
// send headers to target server
fwrite($fp, "POST $path HTTP/1.1\n");
fwrite($fp, "Host: $host\n");
fwrite($fp, "Content-Length: $qlen\n");
fwrite($fp, "Content-Type: application/x-www-form-urlencoded\n");
fwrite($fp, "Connection: Close\n");
fwrite($fp, "\n");
fwrite($fp, "$query\n");

Now to actually complete the process and get logged in, I then catch the servers response using the following:

while( !feof($fp) )
{
$response .= fgets($fp, 4096);
}
fclose($fp);

Which returns the following headers (sorry for the lack of newlines, wasn't that far yet with the code lol):

HTTP/1.1 302 Found Date: Tue, 31 Dec 2002 07:43:18 GMT Server: Apache/1.3.27 (Unix) (Red-Hat/Linux) mod_jk/1.2.0 mod_perl/1.24_01 PHP/4.2.2 FrontPage/5.0.2 mod_ssl/2.8.12 OpenSSL/0.9.6b X-Powered-By: PHP/4.2.2 Pragma: no-cache Set-Cookie: SQMSESSID=7d9c8672647c84ad9e5a03bd9413a600; path=/squirrelmail/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Set-Cookie: squirrelmail_language=en_US; expires=Thu, 30-Jan-03 07:43:18 GMT; path=/squirrelmail/ Set-Cookie: key=JU684lVjNXk%3D; path=/squirrelmail/ Location: webmail.php Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=iso-8859-1 0

This redirects my browser to webmail.php on my server (the one running the script I'm writing, not the one running the webmail app), while I was hoping for it to get me logged in to the webmail. Hence problem 🙂 Anyone? Pretty please? 🙂

Code_guy

so this is exactly as I under stood it:

You catch the response from your isp's server and forward it as is to your browser which is connected to your local server and interprets url's relative to your local domain.

The response your are getting is metta information that sets 3 cookies and redirects you to webmail.php

or if all the page does is redirect, you can junk the page and redirect the browser your self by sending a meta

since you need to keep the cookies you can parse the response and replace Location: webmail.php with Location: http://www.yourisp.com/path/webmail.php

while( !feof($fp) ) 
{ 
$temp = fgets($fp, 4096);
$temp = str_replace("Location: webmail.php", "Location: [url]http://www.yourisp.com/path/webmail.php[/url]", $temp);
$response .= $temp;
} 
fclose($fp);

it would still be simpler to write a html page with a form with hidden fields and submit it onload

theoden

$temp = str_replace("Location: webmail.php", "Location: <a href="http://www.yourisp.com/path/webmail.php" target="_blank">http://www.yourisp.com/path/webmail.php</a>", $temp);

You sure you meant an anchor to be put into the Location?

Anyways, this does indeed redirect me (stupid of moi, tried this before but not with str_replace 🙂 .. now however I meet my next problem, the cookies. How do I set these? Just printing the headers to the browser should be enough right? (I get redirected to a not logged in message).

I saw someone else comment about using hidden fields instead of this solution. Sad truth of the matter is however that I have no clue how 🙂 If that ought to work better, I'd love to learn though 🙂 Problem for me would be that I don't know the username until it is received as input, but if there's some trick for that plz share? 🙂

theoden

Heh.. Javascript to the rescue.. of course very simple, very obvious.. after the act 🙂

http://developer.irt.org/script/975.htm

Thanks all.

Code_guy

the forum added that anchor stuff
I guess I should have unchecked 'Automatically parse URLs' before hitting 'submit reply'

obviously it's just http://www.yourisp.com/path/webmail.php

glad you got it to work