2012-06-29 66 views
0

我使用curl将数据发布到另一台服务器,每个发布之间使用 我使用函数来获取隐藏字段 ,如“__VIEWSTATE”。 它以前就像一个魅力,但他们更新了网站, ,所以我重写我的代码使用新的fieldnams, 但在最后一步我得到的错误: “验证视图状态MAC失败。curl +“验证视图状态MAC失败。”

,如果我做同样的步骤是在网页浏览器它的作品,因为它应该 我用了一个插件获取什么POSTDATA浏览器中发送 ,并进行了比较,与我的脚本发送, 和它的外观一样。

我对ASP.NET的了解很少, 和我可以在这里找到关于错误的所有信息 推荐ASP-NET服务器上的更改。

所以我希望这里有人能指导我找出为什么 它在浏览器中有一个100%successrate, 和卷曲有一个页面, 0%successrate但使用上previus页, 作品相同功能100%卷曲。

POSTDATA浏览器被发送:

__EVENTTARGET= 
__EVENTARGUMENT= 
__VIEWSTATE=%2FwEPDwUKLTk2MDAxNjU3MA9kFgJmD2QWAgIDD2QWDgIFD2QWAgIBDw8WAh4EVGV4dAUfRsO2cmV0YWdzZ3J1cHBlbiBpIEfDtnRlYm9yZyBBQmRkAgcPDxYEHwAFH0bDtnJldGFnc2dydXBwZW4gaSBHw7Z0ZWJvcmcgQUIeC05hdmlnYXRlVXJsBR1%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%2BgWrg%2B8u3EnNPkQGA%3D%3D 
__EVENTVALIDATION=%2FwEWFwKGsKOJCgK70ZWTDQLr%2BJWFDQKo1a2oCwKplfT%2BCgLRieqTAwKt6qHvAQK9rKu9AgKh%2F5ODDQKqtpTtDQLvv7CxBALa4vDGBQKCuafwDwKP1ZOjBgKsqdXxCgL6hbmQBwK%2BjaGZDQL%2FqY7cBALml%2FqcBgLYg53pDwL108DhBQLfzPnCAQLBr6dM9cK5UIsGFZ5ocJchTM8CHTFigfk%3D 
ctl00%24body%24cmdSave=Spara 
ctl00%24body%24txtName=BYGG+%26+ENERGISERVICE+S%C3%96DERT%C3%96RN+AB 
ctl00%24body%24txtUserName=5566960836 
ctl00%24body%24txtEmail=anonym%40telia.se 
ctl00%24body%24txtDepartment= 
ctl00%24body%24chkIsActive=on 
ctl00%24body%24chkHasStatisticsPerm=on 
ctl00%24body%24txtLoginName=5566960836 
ctl00%24body%24txtPassword=stackoverflow 
ctl00%24body%24chkHasAnnualReportService=on 
ctl00%24body%24chkHasCorporationCharterReportService=on 
ctl00%24body%24chkHasCertificateOfRegistrationReportService=on 
ctl00%24body%24chkHasMonitorService=on 
ctl00%24body%24chkHasDigitalSparrkatalogService=on 
ctl00%24body%24chkHasPersonkontrollService=on 
ctl00%24body%24chkHasCompanyReportService=on 
ctl00%24body%24chkHasPersonReportService=on 
ctl00%24body%24cbxReportsCompany3=on 
ctl00%24body%24cbxReportsPerson3=on 
ctl00%24body%24hidNewUser=1 

后的数据我的脚本发送

Array 
(
    [__EVENTTARGET] => 
    [__EVENTARGUMENT] => 
    [__VIEWSTATE] => /wEPDwUKLTk2MDAxNjU3MA9kFgJmD2QWAgIDD2QWDgIFD2QWAgIBDw8WAh4EVGV4dAUfRsO2cmV0YWdzZ3J1cHBlbiBpIEfDtnRlYm9yZyBBQmRkAgcPDxYEHwAFH0bDtnJldGFnc2dydXBwZW4gaSBHw7Z0ZWJvcmcgQUIeC05hdmlnYXRlVXJsBR1+L0NsaWVudENhcmQuYXNweD9DbGllbnRJRD05OGRkAgkPDxYCHgdWaXNpYmxlZ2RkAgsPDxYEHwAFI0JZR0cgJiBFTkVSR0lTRVJWSUNFIFPDlkRFUlTDllJOIEFCHwEFNH4vQ3VzdG9tZXJPdmVydmlldy5hc3B4P0NsaWVudElEPTk4JkN1c3RvbWVySUQ9MjY0NDBkZAINDw8WAh8CZ2RkAg8PDxYCHwAFE1JlZGlnZXJhIGFudsOkbmRhcmVkZAIVDw8WAh8CaGQWAgIDDxBkZBYBZmQYAgUeX19Db250cm9sc1JlcXVpcmVQb3N0QmFja0tleV9fFg0FFmN0bDAwJGJvZHkkY2hrSXNBY3RpdmUFHmN0bDAwJGJvZHkkY2hrSGFzU3VwZXJVc2VyUGVybQUfY3RsMDAkYm9keSRjaGtIYXNTdGF0aXN0aWNzUGVybQUkY3RsMDAkYm9keSRjaGtIYXNBbm51YWxSZXBvcnRTZXJ2aWNlBTBjdGwwMCRib2R5JGNoa0hhc0NvcnBvcmF0aW9uQ2hhcnRlclJlcG9ydFNlcnZpY2UFN2N0bDAwJGJvZHkkY2hrSGFzQ2VydGlmaWNhdGVPZlJlZ2lzdHJhdGlvblJlcG9ydFNlcnZpY2UFH2N0bDAwJGJvZHkkY2hrSGFzTW9uaXRvclNlcnZpY2UFK2N0bDAwJGJvZHkkY2hrSGFzRGlnaXRhbFNwYXJya2F0YWxvZ1NlcnZpY2UFJmN0bDAwJGJvZHkkY2hrSGFzUGVyc29ua29udHJvbGxTZXJ2aWNlBSVjdGwwMCRib2R5JGNoa0hhc0NvbXBhbnlSZXBvcnRTZXJ2aWNlBSRjdGwwMCRib2R5JGNoa0hhc1BlcnNvblJlcG9ydFNlcnZpY2UFHWN0bDAwJGJvZHkkY2J4UmVwb3J0c0NvbXBhbnkzBRxjdGwwMCRib2R5JGNieFJlcG9ydHNQZXJzb24zBRBjdGwwMCRtbHRDb250ZW50Dw9kZmR8z6SDM7weB+gWrg+8u3EnNPkQGA== 
    [__EVENTVALIDATION] => /wEWFwKGsKOJCgK70ZWTDQLr+JWFDQKo1a2oCwKplfT+CgLRieqTAwKt6qHvAQK9rKu9AgKh/5ODDQKqtpTtDQLvv7CxBALa4vDGBQKCuafwDwKP1ZOjBgKsqdXxCgL6hbmQBwK+jaGZDQL/qY7cBALml/qcBgLYg53pDwL108DhBQLfzPnCAQLBr6dM9cK5UIsGFZ5ocJchTM8CHTFigfk= 
    [ctl00$body$hidNewUser] => 1 
    [ctl00$body$cmdSave] => Spara 
    [ctl00$body$txtName] => BYGG & ENERGISERVICE SÖDERTÖRN AB 
    [ctl00$body$txtUserName] => 5566960836 
    [ctl00$body$txtEmail] => [email protected] 
    [ctl00$body$txtDepartment] => 
    [ctl00$body$chkIsActive] => 1 
    [ctl00$body$chkHasStatisticsPerm] => 1 
    [ctl00$body$txtLoginName] => 5566960836 
    [ctl00$body$txtPassword] => stackoverflow 
    [ctl00$body$chkHasAnnualReportService] => 1 
    [ctl00$body$chkHasCorporationCharterReportService] => 1 
    [ctl00$body$chkHasCertificateOfRegistrationReportService] => 1 
    [ctl00$body$chkHasMonitorService] => 1 
    [ctl00$body$chkHasDigitalSparrkatalogService] => 1 
    [ctl00$body$chkHasPersonkontrollService] => 1 
    [ctl00$body$chkHasCompanyReportService] => 1 
    [ctl00$body$chkHasPersonReportService] => 1 
    [ctl00$body$cbxReportsCompany3] => 1 
    [ctl00$body$cbxReportsPerson3] => 1 
) 

问题:

什么客户端的差异可以触发“视图状态MAC的验证失败“误差?

(注意:POSTDATA上面已经豆2种方式处理,首先我用“计算器”取代了密码,我也更换假名的电子邮件地址的用户)

回答

0

使用了错误的URL,从开始发送了正确的postdata,只是将它发送到了错误的地方。 这么简单,当你看错了地方时仍然很难找到。

0

检查,以便看看有没有一些javascript在发布之前更改值,并且在保存方面,也设置referrer页面。

+0

好点,忘了告诉你,当我使用webbrowser –