
|
A 401 error occur when i use post method to login a website.
The website is: www.19lou.com/login
My username is: cyberarmy
My password is: wangyouliang
My C# code:
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Text;
using System.Windows.Forms;
using System.Net;
using System.IO;
using System.Web;
namespace _19lou
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
}
const string LoginUrl = @"http://www.19lou.com/login";
HttpWebRequest httpWebRequest;
HttpWebResponse httpWebResponse;
string responseFromServer; string username = "cyberarmy"; string password = "wangyouliang"; private void btn_login_Click(object sender, EventArgs e)
{
if (txt_username.Text != "" && txt_password.Text != "")
{
string PostData = string.Format("userName={0}&userPass={1}&captcha=&checked=0&cityInfo=&refererUrl=aHR0cDovL3d3dy4xOWxvdS5jb20=&remember=1", username, password);
SendLogin(LoginUrl, PostData);
}
}
public void SendLogin(string loginUrl, string postData)
{
byte[] byteArray = Encoding.GetEncoding("GBK").GetBytes(postData);
try
{
ServicePointManager.Expect100Continue = false;
CookieContainer cookieContainer = new CookieContainer();
httpWebRequest = (HttpWebRequest)WebRequest.Create(loginUrl);
httpWebRequest.Credentials = new NetworkCredential(username, password, "www.19lou.com");
httpWebRequest.CookieContainer = cookieContainer;
httpWebRequest.Accept = "image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/QVOD, application/QVOD, application/xaml+xml, application/x-ms-xbap, application/x-ms-application, application/vnd.ms-xpsdocument, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*";
httpWebRequest.Headers["Accept-Language"] = "zh-cn";
httpWebRequest.UserAgent = "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)";
httpWebRequest.ContentType = "application/x-www-form-urlencoded";
httpWebRequest.Method = "POST";
httpWebRequest.ContentLength = byteArray.Length;
Stream dataStream = httpWebRequest.GetRequestStream();
dataStream.Write(byteArray, 0, byteArray.Length);
httpWebResponse = (HttpWebResponse)httpWebRequest.GetResponse();
if (httpWebResponse.StatusCode == HttpStatusCode.OK)
{
StreamReader reader = new StreamReader(httpWebResponse.GetResponseStream(), Encoding.GetEncoding("utf-8"));
responseFromServer = reader.ReadToEnd();
reader.Close();
dataStream.Close();
httpWebResponse.Close();
}
}
catch (Exception ex)
{
MessageBox.Show(ex.Message);
}
}
}
}
|
|
|
|

|
This account is for testing .
|
|
|
|

|
SO FREAKIN' WHAT?? Now ANYONE can impersonate you with malicious intent. Who cares if it's a "test" account.
|
|
|
|

|
Well now we have your username and password, and your email address we can cause any sort of trouble for you.
|
|
|
|

|
I voted to remove the post for the author's own good for that reason.
|
|
|
|

|
You're bypassing a captcha; meaning the site's owner has put in measures to prevent automated bots abusing his/her site. Whatever you're going to do, I doubt it complies with the TOS.
|
|
|
|

|
Just actually went to the URL?? I wasn't going to risk it because of recently exposed exploits.
|
|
|
|