Posting a comment on website !!

[cgworld]

Hello guys,
We have an Auto generated spam-protection like this:
post/comment/new/8/fid/12828237714c76565b983a8/atrty/1282823771/avrvy/0/key/cee8a8c9f46b964922fb12eedc60773c/#post_form

first time works, second no !

cgworld Reviewed by cgworld on 26th Aug 2010. Posting a comment on website !! Hello guys, We have an Auto generated spam-protection like this: post/comment/new/8/fid/12828237714c76565b983a8/atrty/1282823771/avrvy/0/key/cee8a8c9f46b964922fb12eedc60773c/#post_form first time works, second no ! Rating: 5

[litewarez]

<form action="http://google.com/search" name=f>
  <input autocomplete="off" maxlength=2048 name=q class="lst" title="Google Search" value="" size=57 />
  <input name=btnG type=submit value="Google Search" class=lsb onclick="this.checked=1">
</form>

just create a form with the same keys / values and inputs as the form on the site you wish to post to, and set the action to that site.

[cgworld]

Sorry but this can't be done because ... let me explain how the site works.
this is the blog address :

http://amir2download.mihanblog.com/

because its using java to pop-up the comment posting page you have to enter this into the browser url after the site is loaded :

javascript:newComment(10)

and then the page appears !!

now the problem is that the "action" is like this :

action="http://www.gamepack.mihanblog.com/post/comment/new/8/fid/12828237714c76565b983a8/atrty/1282823771/avrvy/0/key/cee8a8c9f46b964922fb12eedc60773c/#post_form

[sloddl]

<?php
the code which adds $_POST['name'] and $_POST['comment'] to your database.
?>
<form method="post">
<input name="name" />
<textarea name="comment"></textarea>
</form>

[cgworld]

Sorry but this is not related with my question !!

[Mr Happy]

They are using cookies, javascript and other protection to prevent this.

You could spend hours trying to bypass this and get nowhere. It's their form of capcha system

[litewarez]

if that site has CSRF Protection Mothods then you cant do this unless you have the CSRF Token thats generated per request.

regardless of Curl / post / forms etc, you need the form CSRF Token

[cgworld]

No problems. Done with VB.NET

[litewarez]

Show us your VB Post block of code, becuase im sure thats a CSRF Token.

/key/cee8a8c9f46b964922fb12eedc60773c/

[l0calh0st]

Yeah share the code!