Creating my own form and submitting to their site

[LazyD]

So, in an attempt to completely bypass an advertisers landing page I would like to make my own form to mimic theirs and just submit it to the same URL they theirs submits too...

This all sounds well and good but I Have a few questions....

1. The page seems to generate these items from the URL or posts them to the URL and outputs into the page....

<div xmlns="http://www.w3.org/1999/xhtml" style="display:none;">
sessionId =
k = ky5drkq8kn
p = XXX(My affiliate ID)
d = default
a = default
s = f2c7e7fdc100a65e95da66a198c931b7
dtc =
r =
</div>

Im not sure what to make of these, if I load the page from the URL without my affiliate id or anyhting on the end, ALL of those fields are blank... Are they some randomly generated hashes that I can recreate?

2. The form action look slike this: https://xxx.xxx.xxx/submitAction.do;jsessionid=crATpB-_CWPedW3zal
Can I recreate the jsessionid like they have theres? I havent seen a pattern, just alot of random shit with dashes and crap....

3. Theres also this attribute in the form tag that ive never seen before
location="getAttribute($request, 'form')
Any ideas what the hell this is? Ive looked through documentation and havent found a valid attribute for <form> called locaton...

 

[beejeebers]

View their source, copy it and change the "post" to "get" on the "<form method="post" blah blah blah>" part. Then save that file and run it through your browser, you'll get an error, but you can see exactly what variables are being sent by the form. Just copy everything in the address field on your browser and you'll see it all.

That is what you need to be worried about sending. Hope that makes sense.

 

[LazyD]

Perfect sense, I wanted to get to that point but didnt want to sign up for there crap, I totally forgot about using GET instead of post, thanks Beejeebers

 

[smaxor]

Easiest way is to get something called live http headers, then open it and make a post. You'll see the post string in lhh copy and paste it out of there. That's the actual header being sent. I'll add tutorial on how to do that to my site here shortly, just been busy.

P.S. 99/100 the advertiser is not going to allow this. They see all the post coming for duplicate IP's and that's a big no no. Unless you have special terms, of course.

 

[LazyD]

Thanks for the info smaxor, its an offer through Copeac and I talked to an AM who said it was alright...

Still, I agree im sure they wont exactly like it, but for the offer being such a short form it seems pointless and damaging to try to have a landing page then the form...