Re: Problem with cookies

[Robert I. <cor...@gm...>]

On 7/20/07, Artur B <ar...@gm...> wrote:
> 1) Server's logs are not helpful, I was looking in them from the start,
> no usefull information there, just 302 and 200 codes returned.

Your web-application seems to be rejecting authentication.
Not apache, but your php, perl, java, etc application should
contain a log and report all failed authentications.

> 2) This site is HTTPS-only so capturing the traffic will do nothing.

I see.

> 3) The email/password are correct, and I tried all combinations of input
> already
> (reading from the file and using USERNAME and PASSWORD tags). What's
> interesting, when I deliberatly specify incorrect email/password then
> nothing changes,

One more arg in favor of the failed authentication.

> 4) I can't find any option in curl-loader for logging everything it sends
> over HTTP(S),
> such option would be very helpful in debugging the program. It shouldn't be
> hard to implement and I think that's where we should start from.

Correct. However, we have really a zero bandwidth till September.
I will try my best, but cannot promise any date. Adding it to our
highest priority list TODO.

My filing is that you application requires multi-part form.
Y may try using it.

Another option is that you will use a Firefox extention for logging/capture of
the header files. Many your ago it was Mozilla and it was working with HTTPS
good. Interesting, which Content-Type header browser sends in POST:
"application/x-www-form-urlencoded"  or "multipart/form-data"
If the second, thus, clearly multipart/form is necessary.


Sincerely,
Robert Iakobashvili,
coroberti %x40 gmail %x2e com
...........................................................
http://curl-loader.sourceforge.net
A web testing and traffic generation tool.