我在 cURL HTTP POST cookie 响应中看到的这一变化表明什么?

发布于 2024-07-17 06:47:30 字数 1594 浏览 5 评论 0原文

我正在使用 cURL 和 php 来查询打开了基于表单的身份验证的交换服务器。 由于 FBA 开启,我需要首先收集用户的 cookie 身份验证 ID。 昨天一切正常:然后一夜之间发生了变化并且停止了工作。 我注意到我返回的 cookie id 不同(不是 id 本身,因为它们随着每次新调用而改变。相反,格式和其他内容发生了变化)。

我过去常常看到这个:

# Netscape HTTP Cookie File
# http://www.netscape.com/newsref/std/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.

sdgh.utest.edu  FALSE   /   FALSE   0   sessionid   aeddf34c-16fe-4126-8c96-da7a33d244b9
sdgh.utest.edu  FALSE   /   TRUE    0   cadata  "0x0zHQHA3o8Vcu/DK/MWp69xkkZAJkIMts3HrOeHc4a71GN0CbqnDLiadJfKfSsseiyyxkyyUhRQ="

现在我看到这个(注意第二行的 url 和第二个 id 前面的“#HttpOnly_”):

# Netscape HTTP Cookie File
# http://curl.haxx.se/rfc/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.

sdgh.utest.edu  FALSE   /   FALSE   0   sessionid   11358a02-233c-4425-8a83-6b8b69b21bcd
#HttpOnly_sdgh.utest.edu    FALSE   /   TRUE    0   cadata  "0FHKgxeq7st0DW57zl5HDgZ5gp7eRDqgfG6iAyxSf4TvyJI5aZI5wmPeiEHFloGo2bvH0fpnl52c="

谁能告诉我这种突然的变化意味着什么?
我的网络服务器有什么变化吗?
难道是我正在查询的交换服务器?
难道有人在一夜之间背着我更新了 cURL?
另外,我的网络服务器上没有自动更新。

有人认为这甚至意味着 cURL 已更新吗? 据我所知,我没有更新它。 cURL 或 libcurl 何时/为何从 http://www.netscape.com/newsref 切换/std/cookie_spec.html
到此
http:// curl.haxx.se/rfc/cookie_spec.html

感谢您的帮助!

I'm using cURL and php to query an exchange server that has Forms Based Authentication turned on. Due to FBA being on I need to collect a user's cookie authentication ids first. Yesterday everything was working: then something changed overnight and stopped working.
I noticed that the cookie ids I was getting back were different (not the ids themselves because they change with every new call. Rather, the format and other things changed).

I use to see this:

# Netscape HTTP Cookie File
# http://www.netscape.com/newsref/std/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.

sdgh.utest.edu  FALSE   /   FALSE   0   sessionid   aeddf34c-16fe-4126-8c96-da7a33d244b9
sdgh.utest.edu  FALSE   /   TRUE    0   cadata  "0x0zHQHA3o8Vcu/DK/MWp69xkkZAJkIMts3HrOeHc4a71GN0CbqnDLiadJfKfSsseiyyxkyyUhRQ="

And now I see this (notice the url on the second line and the "#HttpOnly_" in front of the 2nd id):

# Netscape HTTP Cookie File
# http://curl.haxx.se/rfc/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.

sdgh.utest.edu  FALSE   /   FALSE   0   sessionid   11358a02-233c-4425-8a83-6b8b69b21bcd
#HttpOnly_sdgh.utest.edu    FALSE   /   TRUE    0   cadata  "0FHKgxeq7st0DW57zl5HDgZ5gp7eRDqgfG6iAyxSf4TvyJI5aZI5wmPeiEHFloGo2bvH0fpnl52c="

Can anyone tell me what this sudden change indicates?

Did something change on my web server?
Could it be the exchange server that I'm querying?
Did someone update cURL on me behind my back overnight?
Also, I do not have automatic updates happening on my web server.

Does anyone think this even implies that cURL was updated? I didn't update it as far as I can tell.
When/why does cURL or libcurl switch from http://www.netscape.com/newsref/std/cookie_spec.html
to this
http://curl.haxx.se/rfc/cookie_spec.html

Thanks for the help!

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(1

挽容 2024-07-24 06:47:30

好的,这是 #HttpOnly_ 前缀的解释: http://blog.php-security.org/archives/40-httpOnly-Cookies-in-Firefox-2.0.html

我对这个问题的理解是curl或libcurl已更新,因此,服务器现在将其视为能够处理#HttpOnly_ cookies 的用户代理。

Ok,here is an explanation for the #HttpOnly_ prefix: http://blog.php-security.org/archives/40-httpOnly-Cookies-in-Firefox-2.0.html

My understanding of the issue is that curl or libcurl was updated and that as a result, the server now sees it as a user-agent capable of dealing with #HttpOnly_ cookies.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文