Credit Counseling - Bleach 151 . Bleach 152 - Gómez PEER - Best Search Engine - Credit Cards

PDA

View Full Version : manipulating $_POST[]


mehdiali
Nov 9th 2007, 8:21 am
hi everyone
image that i am in login.php page.after sumitting
(<form method="POST" action="welcome.php">),
i go to welcome.php page.
so,is there any way to change value of $_post['username']
without using the form.
what do you think a bout socket programming?
thank you in advance.

powerspike
Nov 9th 2007, 9:37 am
you could use ajax ?

you can get data to and from the page without changing the page itself.

mehdiali
Nov 9th 2007, 10:25 am
i mean i want to skip from input filters(if they are on login.php page).
or minimal go to welcom.php page directly and fill the $_POST myself whitout any problem.

spy_force
Nov 9th 2007, 10:42 am
<body onLoad="document.forms['form_id'].submit();">
add id to your form
<form method="POST" action="welcome.php" id="form_id">

bobb1589
Nov 9th 2007, 11:02 am
your making it seem like you dont want a login at all?

decepti0n
Nov 9th 2007, 5:39 pm
If it's your site, just use $_POST['username'] = 'somethingelse';

If you're logging in somewhere and trying to change your username to take over another account, no.

mehdiali
Nov 10th 2007, 12:09 am
you didn't understand.
look at here !
they are not my page.
i just know there is $_POST['username'] in welcome.php page.i want to assign a value
to $_POST without login(submitting the form).think about hacking.
is there any way to do this?
hops you will get it!

decepti0n
Nov 10th 2007, 6:24 am
As far as I know, no, unless they're have register_globals on, in which case (I assume) it'd be as simple as adding ?username=whatever to the url.