[RESOLVED] Help! Remote use of $_POST!

Masna

Hello all... I'm working on my own MySQL admin, and right now, I'm working on remotely sending information to a defined server (mysqlquickadmin.com). I'm working on allowing users who use this MySQL admin to backup their database to my servers, through fsockopen. My headers look like this...

$host = "www.mysqlquickadmin.com/db_support.php";
$_POST['backup_sql'] = html_entity_decode($_POST['backup_sql']);
$vars = "&backup_sql=";
foreach($_POST as $index=>$value){
     $vars .= "&$index=$value";
}
$path = explode('/',$host);
$host = $path[0];
unset($path[0]);
$path = '/'.(implode('/',$path));
$post  = "POST ".$path." HTTP/1.1\r\n";
$post .= "Host: $host\r\n";
$post .= "Content-type: application/x-www-form-urlencoded\r\n";
$post .= $others;
$post .= "User-Agent: Mozilla 4.0\r\n";
$post .= "Content-length: ".strlen($vars)."\r\n";
$post .= "Connection: close\r\n\r\n";
$post .= $vars;

Clearly, $_POST vars will be split via &[key]=[value]. The only problem with this is, if the backup_sql value (the actual backup of the database text-ized) contains &whatever=whatever, it'll automatically be split. Is there another way I can send this information, or a different method so I can avoid this nasty nuance? Thank you (in advance).

Masna

Anyone?

Masna

Anyone?

thepeccavi

you could try putting the info that you want to send in to a form where all the <input>s are type="hidden", this would mean that when you clicked a submit button (continue perhaps?) it sent the processed query to the remote server (mysqlquickadmin.com)...

If the page at mysqlquickadmin.com normally takes "?query=A QUERY" or whatever, then just make the form method "get", if not, could you tell us how you would currently send the info...

Hope this works!

Masna

Hmm... You know, using hidden inputs in a form was my first attempt; totally slipped my mind when I got completely caught up in how I could incorporate fsockopen to this remote connection project. I'm going to give it a shot ASAP. Thanks for the suggestion (and reminder)!

thepeccavi

I always try to keep my scripts simple... fsockopen() is really advanced (I am hopeless with it)...

Could you tell us more about how you can pass you query to mysqlquickadmin.com? Does it pass through the url (?query={a query}) or through a POSTed form?

Masna

Well, actually, I'm passing a $POST form to an "actions" page on the site (most of the actual querying is done on a separate actions page; it's really neat). Anyhow, this actions page then sends these $POST vars (the $POST vars contain a license key, the domain, a client username and password, and the actual backup query in a hidden input) to the remote page (mysqlquickadmin.com/page.php) through fsockopen, fwrite, and fread. Those $POST vars were laid out like such (look at the headers above). I just want help passing the vars to the remote page via fsockopen with headers along these lines (found this in the manual comments):

$boundary = "---------------------".substr(md5(rand(0,32000)),0,10);

   // Build the header
   $header = "POST $remote_url HTTP/1.0\r\n";
   $header .= "Host: $remote_server\r\n";
   $header .= "Content-type: multipart/form-data, boundary=$boundary\r\n";
   // attach post vars
   foreach($_POST AS $index => $value){
       $data .="--$boundary\r\n";
       $data .= "Content-Disposition: form-data; name=\"".$index."\"\r\n";
       $data .= "\r\n".$value."\r\n";
       $data .="--$boundary\r\n";
   }

I was attempting this originally, but I couldn't get it to work. Thanks again!

Masna

Peccavi, I know you want to help.

Masna

THIS HAS BEEN RESOLVED!!!

I used these exact headers, and was able to simply send $_POST vars to a remote server:

srand((double)microtime()*1000000);
					$boundary = "---------------------".substr(md5(rand(0,32000)),0,10);

				// Build the header
				$post = "POST ".$path." HTTP/1.1\r\n";
				$post .= "Host: $host\r\n";
				$post .= "Content-type: multipart/form-data, boundary=$boundary\r\n";
				// attach post vars
				foreach($_POST as $index => $value){
					$vars .="--$boundary\r\n";
					$vars .= "Content-Disposition: form-data; name=\"".$index."\"\r\n";
					$vars .= "\r\n".$value."\r\n";
					$vars .="--$boundary\r\n";
				}
				//$post .= "User-Agent: Mozilla 4.0\r\n";
				$post .= "Content-length: ".strlen($vars)."\r\n";
				$post .= "Connection: close\r\n\r\n";
				$post .= $vars;

				$h = fsockopen($host,80);
				fwrite($h,$post);

				$b = fread($h,8192);
				fclose($h);

Thanks to everyone that helped!