Autologin using cURL

[Jermaine]

I've been trying to autologin on a remote site using PHP/cURL and then perform further actions within that session.

However, my script doesn't seem to work out.
The client site uses a simple post form:

<form method=post style="display: inline" action=login.php> <input type=text size=10 name=name>
<input type=hidden name=betapass value=348759304
<input type=Password size=10 name=pass>
<input type=submit value=Login></form>

First I post my name and pass and use the fixed betapass.
When I manually login I get forwarded to index.php, but when I perform this script I get the login page!

What's going wrong here?

$url = "http://www.barafranca.nl/login.php";
$params = "name=MYNAME&betapass=348759304&pass=***";
$referer = "http://www.site.com/";

$ch=curl_init();
curl_setopt($ch, CURLOPT_URL,$url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_POST,1);
curl_setopt($ch, CURLOPT_REFERER, $referer );
curl_setopt($ch, CURLOPT_POSTFIELDS,$params);
curl_exec ($ch);

curl_setopt($ch, CURLOPT_URL,"http://www.site.com/index.php");
curl_setopt($ch, CURLOPT_HEADER, 0);
$fres = curl_exec ($ch);
curl_close ($ch);

echo($fres);

[Installer]

See if this helps: after the first "curl_exec()", close the session with "curl_close()", then initialize a new one (without the post settings). You're trying to use the same resource for two different connections.

[Jermaine]

using this code I still get loginpage instead of expected index.php.

<?php

$url = "http://www.page.com/login.php";
$params = "name=xxxxxxxx&betapass=348759304&pass=xxx";
$referer = "http://www.page.com/";

$ch=curl_init();
curl_setopt($ch, CURLOPT_URL,$url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_POST,1);
curl_setopt($ch, CURLOPT_REFERER, $referer );
curl_setopt($ch, CURLOPT_POSTFIELDS,$params);
curl_exec ($ch);
curl_close($ch);

$ch=curl_init();
curl_setopt($ch, CURLOPT_URL,"http://www.page.com/index.php");
curl_setopt($ch, CURLOPT_HEADER, 0);
$fres = curl_exec ($ch);
curl_close ($ch);

echo($fres);

?>

[Installer]

Is the form processing script returning any cookies?

[Jermaine]

Originally posted by Installer
Is the form processing script returning any cookies?

No cookies are being left behind on my computer;

however, i've been trying some options and the following partially works:

<?
$url = "http://www.PAGE.com/login.php";
$params = "name=LOGIN&betapass=348759304&pass=xxxx";
$referer = "http://www.PAGE.com/";

$ch=curl_init();
curl_setopt($ch, CURLOPT_URL,$url);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_COOKIEFILE, "cook");
curl_setopt($ch, CURLOPT_POST,1);
curl_setopt($ch, CURLOPT_REFERER, $referer );
curl_setopt($ch, CURLOPT_POSTFIELDS,$params);
curl_exec ($ch);
curl_close($ch);
?>

This is strange, because the serverside script leaves no cookies on my computer. I also used followlocation.

Executing thise gives me the target page i'm looking for, but only the main frame, the rest is missing!

Why can I login using the cookiefile option and why do I obtain only the single frame?