发表于 2013-7-15 11:47:45
|
显示全部楼层
| 阅读模式
四川省阿坝藏族羌族自治州
抓的包:
GET /user/core.php?act=userLogin&user=qqqqqq&pwd=0x8c1908b8b52683a03daf13c24c01cc67&code=&jsoncallback=jQuery1720981125347099803_1372427036424&_=1372427288600 HTTP/1.1
jQuery1720981125347099803_1372427036424这个不知道怎么生成的
js代码如下:
function user_login(){
var form = modules[index][0],
_u = form.find('input[name="username"]').val(),
_p = form.find('input[name="password"]').val(),
_c = form.find('input[name="code"]').val() || '',
auto_login = form.find('input[name="autologin"]');
if (auto_login.length == 0) auto_login = $('#auto_label');
auto_login = (auto_login.length && auto_login.is(':checked'))? '&autoLogin=on': '';
if( ! (_u in keys)){
check_user(_u, user_login);
return;
}
$.getJSON('http://web.4399.com/user/core.php?act=userLogin&user='+encodeURIComponent(_u)+'&pwd='+util.encode_4399(_p,keys[_u][0])+'&code='+_c+auto_login+'&jsoncallback=?',function(re){
form.find('.alert_box').remove();
if (re['status']) {
show_logined(_u);
var bbs_url = "http://web.4399.com/api/user/loginSync.php?target=discuz&p="+util.f_e(_p)+"&jsoncallback=_"+(new Date).getTime();
var bbs_iframe = $('<iframe style="display:none"></iframe>');
bbs_iframe.load(function(){
setTimeout(function(){
bbs_iframe.remove();
}, 2000);
});
bbs_iframe.attr('src', bbs_url);
$('body').prepend(bbs_iframe);
} else {
if (re['msg'].indexOf('#104:') === 0 && ! code_104) {
code_104 = true;
delete keys[_u];
user_login();
return;
}
if (re['flush']) {
keys[_u][1] = 2;
verification_code(2, _u);
}
util.show_alert(form, re['msg'] || '未知错误', 1, re['msg']? 'notice': 'success');
}
form.find('input[type="submit"]').removeAttr('disabled');
});
}