On Sat, 14 Mar 2009, Florian Bidabé wrote:

> à CAPCHAR, but I don't think that's possible to break it, or jump it (or
> maybe with a POST ASCII/binary php injection ?!)

Is CAPTCHA what you're talking about? If that's the image with text in for a
human to enter, then no - it's designed to make it (next to) impossible to
script.

> à Hash generation by server et recovering (or keeping back) by cURL

That's "just" to fetch the patch, extract the hash, new url, hidden fields or
whatever and do another request. To extract them you just use your favourite
scripting language.

> à Redirect web page

Pretty much as the previous point. Make a script that extracts the tag, finds
the new url and request that.

-- 
  / daniel.haxx.se

-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2009-03-15