CURL and Passport Network

madcitysw

OK I seem to be having some problem trying to login into Passport Network via web. I need to get it to login in so that I can tranfer the xbox live friends list. Here what I got so far


$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://login.live.com/ppsecure/post.srf");
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_COOKIEJAR, 'cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE, 'cookie.txt');

$test["PPSX"] = "PassportRN";
$test["PwdPad"] = "";
$test["SI"] = "    Sign In    ";
$test["LoginOptions"] = "1";
$test["PPFT"] = "B41cvVvmaIseSSjQDK9j6g!iw9MNxae6fnStiMFzaSQYFWehm8MYaZrsAH!KwFncgWzu1ktwzN7Mxn*fhjk5PMLeKNLd";
$test["login"] = "test@test.com";
$test["passwd"] = "XXXXX";

curl_setopt ($ch, CURLOPT_POST, 1);
curl_setopt ($ch, CURLOPT_POSTFIELDS, $test);

$login_page = curl_exec($ch);

Well, when I use my own account info, it keep getting me the incorrect login page, but if I take out the password, then it asks for the password, so that means it getting the password on the server side, but for odd reasons that incorrect and the login info is correct as I can login in using firefox. Is there anybody has any idea what may be wrong?

Thanks
ViPeR

bogu

U dont use the correct syntax for send post variable through curl:

curl_setopt($ch, CURLOPT_POSTFIELDS, "a=3&b=5");

madcitysw

I have done this way as well, it the same result. As I can recall that you can send a array thur the POSTFIELDS and it works just the same as a=3&b=5, but that because I seen it alot in other PHP coding. Maybe the password needs to be coded before sending it. Any other ideas?

bogu wrote:
U dont use the correct syntax for send post variable through curl:
curl_setopt($ch, CURLOPT_POSTFIELDS, "a=3&b=5");

bogu

madcitysw wrote:
Maybe the password needs to be coded before sending it.

No way ...
Did u take the action from the form?
And did u look for curl connection for a https server?
curl_setopt($c, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($c, CURLOPT_SSL_VERIFYHOST, 1);
curl_setopt($c,CURLOPT_SSLVERSION,2);

madcitysw

I not too sure what ya mean taking the action from the form? I looked in the html of the login page and copy all the inputs name and values. I not too sure about the CURLOPT_SSL_VERIFYPEER and etc settings, but I give that part a try and see what i get...

Thanks
ViPeR

bogu wrote:
No way ...
Did u take the action from the form?
And did u look for curl connection for a https server?
curl_setopt($c, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($c, CURLOPT_SSL_VERIFYHOST, 1);
curl_setopt($c,CURLOPT_SSLVERSION,2);

Update: I have tried this and it still the same result, i not sure what going on...

bogu

U are trying to connect to a https server so u need ssl verification ...

I not too sure what ya mean taking the action from the form?

<form method="POST" action="bla/bla/bla" ...

madcitysw

Oh, yes I took the action URL from the login page. I may be thinking that I am missing some inputs, but I still don't know why that would cause a incorrect login LOL. BTW, I been looking for a preg_match_all string to use to grab all the input fields in the HTML code for the login page and return the name and the value. Do you think you could make me one up as I not that 100% great in it, but I have done some other projects with REG EXP. Some of the inputs are hidden as well like this one

<input type="hidden" name="PPFT" id="i0327" value="B4So3u0MyxG9J3nWCLSymb7NRK9glzjh2dEc*yFi!cdIKw1UHmqu1jYO6eDmqxeVsSwnEEf6Gy4U8uH!EjR7KkLUF1*O"/>

and I think this may be the verification. Thanks For your tips

ViPeR

bogu wrote:
U are trying to connect to a https server so u need ssl verification ...
<form method="POST" action="bla/bla/bla" ...

Update: I think I understand what ya mean by the ssl verification, you talking about a SSL Server Certificate, well I found the one that the site uses, but I don't know how you can download it so that you can set it up with CURL. I am using firefox

bogu

I dont like reg. exp. :p
U should open a new thread with that (here are lots of people that like reg exp and I'm not one of them :p ) and I think u are right, u need to grab that from the page in order to make a successfull login...

GL and HF coding. 😃

madcitysw

Well, good news bubby, It was missing some inputs and was able to login and download the friends list, however when I load the script in the editor, it gives me a warning that I leaving a secure connection when going to the friends list page. Anyway I can disenable that?

bogu wrote:
I dont like reg. exp. :p
U should open a new thread with that (here are lots of people that like reg exp and I'm not one of them :p ) and I think u are right, u need to grab that from the page in order to make a successfull login...

GL and HF coding. 😃

NiROE

madcitysw wrote:
Well, good news bubby, It was missing some inputs and was able to login and download the friends list

madcitysw, this is rather cheeky, but I dont suppose you'd be willing to share the working code would you. I've been trying to figure out how to grab the friendslist myself but so i've had no look.

Totally understand if you'd rather not give out the code, but thought i'd ask anyway, hehe ya dont get anything if you dont ask right 🙂