Setting a cookie for a Qhttp connection

**Nyphel** · 5th April 2007, 12:02

That's what I made last week

.
I think my post request is correct, but perhaps is there an authentification problem.
The webmaster said me I was authenticated as an external user, and in this case the server unauthentificate me each time the connection is close (closing Firefox for example). So, perhaps, I'm unauthentificated cause I use 2 QHttp objetcs...

I'll try to see that, and confirm that I'm correctly logged-in with the first request

**patrik08** · 5th April 2007, 12:14

Originally Posted by Nyphel

That's what I made last week

.
I think my post request is correct, but perhaps is there an authentification problem.
The webmaster said me I was authenticated as an external user, and in this case the server unauthentificate me each time the connection is close (closing Firefox for example). So, perhaps, I'm unauthentificated cause I use 2 QHttp objetcs...

I'll try to see that, and confirm that I'm correctly logged-in with the first request

if you have quote..
If we have a look to the headers shown by the navigator, we can see that "/QDMSy9P" becomes "%2FQDMSy9P".
http://www.blooberry.com/indexdot/ht...rlencoding.htm urldecode problem....
if you grab cookie must decode and resend qstring can not decode url string!!

Grab before post ... the form page .... on get method the form page .... to take phpsession code cookie ..
i suppose if php can not init session your post is invalid! why session is not init!

first ....
1- QHttp get ( formpage_client ) take session PHPSESSIONID= xxxxxxxx
and
2- QHttp post ( form data ) +session + referrer ( PHPSESSIONID= xxxxxxxx ) cookie and param ...
like firefox method....

otherwise session on server not valid ASP have it a same mechanismous ... if the session ist not incomming server suppose a hack...

**wysota** · 5th April 2007, 13:00

Originally Posted by Nyphel

The webmaster said me I was authenticated as an external user, and in this case the server unauthentificate me each time the connection is close (closing Firefox for example).

I don't think this is the case. Closing a connection can happen without closing the browser - the server will close the connection about a few seconds without seeing another request coming, so you'd end up with the same effect in Firefox which I guess is not the case.
When the browser closes, it may discard the cookie, but the server won't be notified about it, so this shouldn't influence your requests either.

**Nyphel** · 5th April 2007, 14:51

You are true : my first request (the POST one, in order to be authentificated) is wrong.
I got a cookie, but i was not logged-in.

Moreover, my header content wasn't well written :

Qt Code:

Switch view

QByteArray content = "";
        content.append("tr");
        content.append("=");
        content.append("login");
        content.append("login");
        content.append("=");
        content.append("login");
        content.append("referer");
        content.append("=");
        content.append("");
        content.append("nickname");
        content.append("=");
        content.append(identifiant);
        content.append("&");
        content.append("password");
        content.append("=");
        content.append(password);
        content.append("&");
        content.append("submit");
        content.append("=");
        content.append("Connexion");

QByteArray content = "";
        content.append("tr");
        content.append("=");
        content.append("login");
        content.append("login");
        content.append("=");
        content.append("login");
        content.append("referer");
        content.append("=");
        content.append("");
        content.append("nickname");
        content.append("=");
        content.append(identifiant);
        content.append("&");
        content.append("password");
        content.append("=");
        content.append(password);
        content.append("&");
        content.append("submit");
        content.append("=");
        content.append("Connexion");

To copy to clipboard, switch view to plain text mode

Some "&" were missing !

So here is my new content :

Qt Code:

Switch view

QByteArray content = "";	
 
		content.append("tr");
		content.append("=");
		content.append("login");
		content.append("&");
		content.append("login");
		content.append("=");
		content.append("login");
		content.append("&");
		content.append("referer");
		content.append("=");
		content.append("http%3A%2F%2Fcourriel%2Findex.php");
		content.append("&");
 
		content.append("nickname");
		content.append("=");
		content.append("Stagiaire");
		content.append("&");
		content.append("password");
		content.append("=");
		content.append("%2FQDMSy9P");
		content.append("&");
		content.append("lifetime");
		content.append("=");
		content.append("10000");
		content.append("&");
		content.append("submit");
		content.append("=");
		content.append("Connexion");

QByteArray content = "";	
			
		content.append("tr");
		content.append("=");
		content.append("login");
		content.append("&");
		content.append("login");
		content.append("=");
		content.append("login");
		content.append("&");
		content.append("referer");
		content.append("=");
		content.append("http%3A%2F%2Fcourriel%2Findex.php");
		content.append("&");

		content.append("nickname");
		content.append("=");
		content.append("Stagiaire");
		content.append("&");
		content.append("password");
		content.append("=");
		content.append("%2FQDMSy9P");
		content.append("&");
		content.append("lifetime");
		content.append("=");
		content.append("10000");
		content.append("&");
		content.append("submit");
		content.append("=");
		content.append("Connexion");

To copy to clipboard, switch view to plain text mode

In order to prevent url encoding errors, wrote the "/" directly with "%2F".
Now, my responseHeaderReceived() signal catch an error :
statusCode = 302
reasonPhrase = Found

That's strange, cause the 302 error indicates that the Web server thinks that my URL has been temporarily redirected to another URL.

Here is the full responseHeader :

Qt Code:

Switch view

HTTP/1.1 302 Found
date: Thu, 05 Apr 2007 12:55:23 GMT
server: Apache/2.0.54 (Debian GNU/Linux) PHP/5.1.6-1~bpo.1 mod_ssl/2.0.54 OpenSSL/0.9.7e
x-powered-by: PHP/5.1.6-1~bpo.1
set-cookie: OV1274289294=b5ca1f5abaeea5cb6944080a88adc958; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: c_nickname=Stagiaire; expires=Thu, 05-Apr-2007 15:42:03 GMT
set-cookie: c_password=a07390205157ca30543f2128de117385; expires=Thu, 05-Apr-2007 15:42:03 GMT
location: http://courriel/index.php
transfer-encoding: chunked
content-type: text/html

HTTP/1.1 302 Found
date: Thu, 05 Apr 2007 12:55:23 GMT
server: Apache/2.0.54 (Debian GNU/Linux) PHP/5.1.6-1~bpo.1 mod_ssl/2.0.54 OpenSSL/0.9.7e
x-powered-by: PHP/5.1.6-1~bpo.1
set-cookie: OV1274289294=b5ca1f5abaeea5cb6944080a88adc958; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: c_nickname=Stagiaire; expires=Thu, 05-Apr-2007 15:42:03 GMT
set-cookie: c_password=a07390205157ca30543f2128de117385; expires=Thu, 05-Apr-2007 15:42:03 GMT
location: http://courriel/index.php
transfer-encoding: chunked
content-type: text/html

To copy to clipboard, switch view to plain text mode

Now, I'm logged in and everything is OK... If I don't care about the 302 error.
So, I've you got an idea to explain why I get such error, please ?

**wysota** · 5th April 2007, 15:19

Should this script set those cookies (lines 9 and 10 of the above output) in that situation? You'd have to ask the script author what 302 means in this case

It contains a redirection to index.php so looks like everything is fine, you should follow the location. It probably just redirects you to the proper page after login.

**Nyphel** · 5th April 2007, 16:30

The cookies of lines 9 and 10 seems to be corresponding with the authentification... But I don't think they are usefull. I think that they are identifying the longgin session period.

About the redirection :

Qt Code:

Switch view

<form method="post" action="index.php">

<form method="post" action="index.php">

To copy to clipboard, switch view to plain text mode

Qt Code:

Switch view

<input type="hidden" name="referer" value="http%3A%2F%2Fcourriel%2Findex.php">

<input type="hidden" name="referer" value="http%3A%2F%2Fcourriel%2Findex.php">

To copy to clipboard, switch view to plain text mode

The redirection targets the same page as the form action

.
Ok, I will discuss about that with the webmaster.

Thanks a lot Wysota and Patrick, now I understand better the cookies and how managing them with Qt4/ QHttp

Thread: Setting a cookie for a Qhttp connection

Thread Tools

Search Thread

Display

Hybrid View

Re: Setting a cookie for a Qhttp connection

Re: Setting a cookie for a Qhttp connection

The following user says thank you to patrik08 for this useful post:

Re: Setting a cookie for a Qhttp connection

Re: Setting a cookie for a Qhttp connection

Re: Setting a cookie for a Qhttp connection

The following user says thank you to wysota for this useful post:

Re: Setting a cookie for a Qhttp connection

Similar Threads

QHttp internal error

how to use QHttp inside QThread in Qt3

Bookmarks

Bookmarks

Posting Permissions