Pribadi18 Januari 2012

Lagi xperimen bikin form dinamis

Oleh Wak Jek• di Grup W3 kaskus• 58 Komentar Arsip

lagi xperimen bikin form dinamis.

nama field nya dinamis digenerate dengan cara tertentu seperti

<input name="8enhserjernsnerereoer" type="text" />

itu name disimpan di session masing2, kalau page reload otomatis berubah.

diharapkan, kalau bot ngepost pake curl otomatis repot karena harus 2x exec
curl,

1. ambil nama field
2. post data dengan filed2 tersebut

dimana ketika ngecurl yang ke2x nya, POST tidak diterima karena field nya udah berubah.

Tulisan ini sudah berumur: 14 tahun 7 bulan 20 hari. Informasi di dalamnya mungkin sudah tidak relevan, tapi nilai historisnya sangat berharga, terutama bagi saya sebagai penulisnya.

(Dipulihkan dari arsip Facebook oleh Wak Jek di grup W3 kaskus)

Tag Terkait:

#facebook #W3 kaskus #pribadi

Komentar (58)

Arsip Statis

Mohammad Naufal FadilWednesday 18 January 2012 at 09:19

oh jadi attribute name itu di random... tapi POST filed apa juga random :sesuatu

Wak JekWednesday 18 January 2012 at 09:31

ia, nangkap post var nya sesuai dgn yg ada di session tsb.

Tegar Muhammad AjiWednesday 18 January 2012 at 10:18

post session-nya ganti setiap kali submit?

Wak JekWednesday 18 January 2012 at 10:25

ada 2 fungsi set_post_field($name); dan get_post_field($name); set_post_field dipanggil 1x, memasukkan rand string baru ke session. get_post_field, memanggil isi session <input name="<?php echo $get_post_field('email');?>" Di file proses: if(isset($_POST)){ $email = $_POST[get_post_field('email')]; echo $email; }

Heri Hehe SetiawanWednesday 18 January 2012 at 10:27

bagus bagus lanjutkan

Kecoa Ngamuk KecoaWednesday 18 January 2012 at 10:38

kancutkan, menunggu form test

Wak JekWednesday 18 January 2012 at 11:14

test: http://cektkp.com/test/randomfield.php

Tegar Muhammad AjiWednesday 18 January 2012 at 11:38

pastebin dong

Wak JekWednesday 18 January 2012 at 11:39

http://cektkp.com/test/randomfield.php?source

Mohammad Naufal FadilWednesday 18 January 2012 at 11:40

kalo nyepam pake jquery masih bisa om :))

Wak JekWednesday 18 January 2012 at 11:42

ya bisa, kalau pake browser bisa lah hehe.

Tegar Muhammad AjiWednesday 18 January 2012 at 11:45

hasil investigasi ane: 1. buka http://cektkp.com/test/randomfield.php & view source (jangan ditutup dulu window view-sourcenya) 2. tekan login, ternyata index raw post datanya berbeda dengan field yg dari no.1

Tegar Muhammad AjiWednesday 18 January 2012 at 11:45

solusinya gimana tuh?

Mohammad Naufal FadilWednesday 18 January 2012 at 11:48

^ pasti pake chrome

Wak JekWednesday 18 January 2012 at 11:48

Tegar Muhammad Aji, sama lah.

Tegar Muhammad AjiWednesday 18 January 2012 at 11:50

pake firefox gan, beda tuh..

Mohammad Naufal FadilWednesday 18 January 2012 at 11:55

analisa saya klo di inspect http://i41.tinypic.com/30kugs5.jpg

Wak JekWednesday 18 January 2012 at 11:56

tuh kan sama, kalau gk sama ya gak valid bro hehe. tapi coba skrg reload, atau back ke form nya,

Mohammad Naufal FadilWednesday 18 January 2012 at 11:57

ctrl+u sama inspect beda ya om

Wak JekWednesday 18 January 2012 at 12:03

harusnya sama, ctrl U kan gk reload page. http://a5.sphotos.ak.fbcdn.net/.../404172_3022157070876...

Prast RahastuWednesday 18 January 2012 at 12:06

Kalau buat forum pake masakan aja

Tegar Muhammad AjiWednesday 18 January 2012 at 12:06

http://www.facebook.com/photo.php?v=3139432608575&set=o.100530240016949&type=3

Wak JekWednesday 18 January 2012 at 12:08

Tegar Muhammad Aji coba isi field nya.

Mohammad Naufal FadilWednesday 18 January 2012 at 12:10

ane peraktekan sama seperti video tegar dan inspect pake firebug sama.

Wak JekWednesday 18 January 2012 at 12:11

ane jg hahha. dah klir kukis kukis segala sama kyk di vid. tetep sama

Mohammad Naufal FadilWednesday 18 January 2012 at 12:12

coba pake celana dulu

Tegar Muhammad AjiWednesday 18 January 2012 at 12:12

udah diisi field-nya tetep beda, tapi klo dilihat di firebug memang sama .. mungkin browsernya nge view source of something else

Mohammad Naufal FadilWednesday 18 January 2012 at 12:13

ane Ubuntu 11.10 pas view source sama firebug dua2nya sama

Wak JekWednesday 18 January 2012 at 12:18

kalau hasilnya "Valid data" berarti udah passed. view source beda, gk masalah hhaha

Tegar Muhammad AjiWednesday 18 January 2012 at 12:23

itu session-nya berubah waktu apa? penanganan kasus kosong waktu submit ga perlu diganti fieldname-nya?

Wak JekWednesday 18 January 2012 at 12:28

berubah ketika dipanggil ini. set_form_field(Array('email','password')); lihat di source: http://cektkp.com/test/randomfield.php?source 1. ketika form diload. 2. ketika form selesai di post

Wak JekWednesday 18 January 2012 at 12:32

challenge nya coba lakukan post form tersebut via cURL. ane ingin lihat hasilnya, apakah bisa return "Valid data" atau gk.

Mohammad Naufal FadilWednesday 18 January 2012 at 12:33

challenge accepted !

Tegar Muhammad AjiWednesday 18 January 2012 at 12:34

cURL iku panganan opo gan, ra mudeng

Wak JekWednesday 18 January 2012 at 12:35

itu mainan untuk nyari duit. haha

Wak JekWednesday 18 January 2012 at 12:45

kyknya ada bug n bisa lolos curl. belom coba sih.

Prast RahastuWednesday 18 January 2012 at 12:52

Kalopun bisa spammernya udah males duluan bikin sekripnya

Prast RahastuWednesday 18 January 2012 at 12:54

Kecuali itu jadi sebuah enjin yang banyak dipake

Tegar Muhammad AjiWednesday 18 January 2012 at 12:54

klo situsnya lg kepenuhan kyk kaskus, session_id-nya ikut kepenuhan juga ga ya?

Wak JekWednesday 18 January 2012 at 13:14

@prast, coba bikin form terbuka di web. tunggu bbrp waktu. pasti spam pada masuk. menurut saya ada semacam tools untuk ngegrab form2 apa saja dan mencoba nepam ke form tsb. krn ane pernah mendapati form ane dispam. meski bukan form umum seperti register atau guestbook.

IRvan FauzieWednesday 18 January 2012 at 13:15

Saran ane: setelah form di submit and data2 yg di submit telah di eksekusi lalu UNSET Session2 field name form tsb oom Wak Hehe Jek

Wak JekWednesday 18 January 2012 at 13:18

@tegar, kaskus kepenuhan itu kebanyakan koneksi ke db. kalu SESSID kan nyimpan di file. dan akan hilang ketika session habis. kecuali HDD nya seupil.

IRvan FauzieWednesday 18 January 2012 at 13:18

Tegar Muhammad Aji kalo khawatir dgn session_id(), pake aja rand()

Tegar Muhammad AjiWednesday 18 January 2012 at 13:22

IRvan rand() terlalu shuffle, session_id() aja udah acak.. bgmn klo mt_rand() skalian

Tegar Muhammad AjiWednesday 18 January 2012 at 13:23

mersene twister

Wak JekWednesday 18 January 2012 at 13:25

IRvan Fauzie sessid gpp gk diunset.

Wak JekWednesday 18 January 2012 at 14:52

ane coba pake curl, http://cektkp.com/test/ngecurlrandomfield.php src nya http://cektkp.com/test/ngecurlrandomfield.php?source RETURN EMPTY DATA. :wink

Wak JekWednesday 18 January 2012 at 16:36

itu pake session, bukan cokis

Wak JekWednesday 18 January 2012 at 16:38

berarti gk bisa login donk. kalau didisabel

Wak JekWednesday 18 January 2012 at 16:42

gmn, bisa pass form pake curl.? :d

Tegar Muhammad AjiWednesday 18 January 2012 at 16:50

tadi curl, skrg cookies, jd laper

Wak JekWednesday 18 January 2012 at 16:51

Muhammad Naufal Fadil . mana tadi yang challenge accepted

Wak JekWednesday 18 January 2012 at 16:53

hmm.. pakai CURLOPT_COOKIEFILE ya ?

Wak JekWednesday 18 January 2012 at 16:54

mana kode nya. atau live demo

Wak JekWednesday 18 January 2012 at 16:58

wow sangar kode nya,

Wak JekWednesday 18 January 2012 at 17:09

hmm. jadi bingung. wkwkkw.

Wak JekWednesday 18 January 2012 at 17:14

haha ia bingung ane , masuk

Wak JekWednesday 18 January 2012 at 17:18

off dlo ntar di oprek lagi, thanks.