自动登录Stackoverflow

Question

I get quite annoyed by logging in to SO sometimes and i'd like to do it by just calling a PHP file. I tried doing so by sending a post request like this:

<?php
$url = 'https://stackoverflow.com/users/login?ssrc=head&amp;returnurl=http%3a%2f%2fstackoverflow.com%2f';
$data = array('email' => '[e-mail]', 'password' => 'mypasswort');

$options = array(
    'http' => array(
        'header'  => "Content-type: application/x-www-form-urlencoded
",
        'method'  => 'POST',
        'content' => http_build_query($data),
    ),
);
$context  = stream_context_create($options);
$result = file_get_contents($url, false, $context);

var_dump($result);
?>

I also tried including more values like ssrc and fkey but i just shows the SO mainpage after submitting. It even stays at localhost (or wherever the script is running). If i enter a wrong password it marks it as incorrect - so it has to work at lest in some way (the data verification)...

Answer 1

You must send post data:

isSignup:false
isLogin:true
isPassword:false
isAddLogin:false
hasCaptcha:false
fkey:922b6dc5a5a375283c44e298246d7763
ssrc:head
email:asd
password:
submitbutton:Log in
oauthversion:
oauthserver:
openidusername:
openididentifier:

You should send first GET request and parse fkey from result page (this is CSRF protection). fkey you should send with POST request with post data which I show you.

Simple example:

<?php

$url = 'https://stackoverflow.com/users/login?ssrc=head';
$data = array(
    'email' => 'mail@email.z',
    'password' => 'pass',
    'isSignup' => false,
    'isLogin' => true,
    'isPassword' => false,
    'isAddLogin' => false,
    'hasCaptcha' => false,
    'fkey' => '',
    'ssrc' => 'head',
    'submitbutton' => 'Log in',
    'oauthversion' => '',
    'oauthserver' => '',
    'openidusername' => '',
    'openididentifier' => ''
);

$options = array(
    'http' => array(
        'header' => "Content-type: application/x-www-form-urlencoded
",
        'method' => 'GET',
    ),
);
$context = stream_context_create($options);
$result = file_get_contents($url, false, $context);

preg_match('~name\=\"fkey\"\svalue=\"([\w]+)\"~', $result, $matches);

$data['fkey'] = $matches[1];

$options = array(
    'http' => array(
        'header' => "Content-type: application/x-www-form-urlencoded
",
        'method' => 'POST',
        'content' => http_build_query($data),
    ),
);
$context = stream_context_create($options);
$result = file_get_contents($url, false, $context);

var_dump($result);

But I recommend for you use SO API and you willn't have any problems

If you will have problem, write