Okay
I know that to duplicate
you send the commandCode:<form action="./test.php" method="post"> <input type="hidden" name="field" value="myval"> <input type="submit" name="subby" value="didsubmit"> </form>
But I don't know how to mimic file upload forms likeCode:POST /test.php field=myval&subby=didsubmit HTTP/1.1
How do I do this?Code:<form action="./test.php" method="post"> <input type="file" name="myupload"> <input type="submit"> </form>
You send this command? That's not correct HTTP, actually. If you do
then you have at least a syntactically correct request-line, but it's still not a valid HTTP/1.1 request. Also, the parameters are encoded as GET parameters, not POST parameters, which can and will confuse scripts that make the distinction.Code:POST /test.php?field=myval&subby=didsubmit HTTP/1.1
This is the very least you have to send for it to be valid HTTP/1.1. This doesn't solve the GET vs PUT variable problem, though. For that, you have to move the parameters to the entity body.Code:POST /test.php?field=myval&subby=didsubmit HTTP/1.1 Host: www.example.com
Now, file upload is even more complicated. It starts with your form suffering from incompatibility problems. I don't know if any browsers actually submit data in such a form. I know for sure that the file upload won't work with PHP. If you want a file upload, then you have to give the form the enctype="multipart/form-data". Otherwise, you'll have problems.Code:POST /test.php HTTP/1.1 Host: www.example.com Content-type: application/x-www-form-urlencoded Content-length: 27 field=myval&subby=didsubmit
Now, I'm not going to type up how to encode such a request. You can find an example in the HTML 4.01 spec. Another valuable resource is the HTTP/1.1 spec.
All the buzzt!
CornedBee
"There is not now, nor has there ever been, nor will there ever be, any programming language in which it is the least bit difficult to write bad code."
- Flon's Law
