php模拟登录新浪微博，解决微博rsa2加密方式登录问题

作者: 苹果企业签名201368037 | 来源:发表于2018-09-22 18:10 被阅读193次

最近公司需要使用新浪微博做营销活动，需要解决通过我们后台模拟微博登录，并向微博抓取数据。

通过抓包分析，新浪微博登录过程分别有三步：

1.先通过接口预登陆调用获得用户名加密过的用户名、nonce以及rsakv。

2.通过js加密密码过后的得到sp参数传回去登录返回结果。

3.在上一步中返回的结果有三个crossDomainUrl是用于SSO统一登录的，分别请求一次crossDomainUrl，获取cookie保存下来即可登录。

ps：如果是一些简单的爬虫，就直接使用浏览器的cookie吧，这样简单一下。

<?php

namespace Home\Controller;

use Think\Controller;

/**

* @auther 邓锦铖，

* 在thinkphp中可以直接使用

class TessinaController extends Controller

{

// 微博用户名称密码

private $username = '***';

private $password = '***';

// 请求cookie

private $request_cookie = '';

// 预登陆返回json

private $json_obj = null;

// 请求头

private $request_headers = array(

'Host' => 'login.sina.com.cn',

'User-Agent' => 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0',

'Accept' => 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',

'Accept-Language' => 'en,zh-CN;q=0.8,zh;q=0.5,en-US;q=0.3',

'Accept-Encoding' => 'gzip, deflate',

'Referer' => 'http://login.sina.com.cn/',

'Connection' => 'keep-alive'

);

// base64加密后用户名

private $su = '';

// js加密后的密码

private $sp = '';

function __construct()

{

parent::__construct();

}

// 预登陆，登录方法入口，调用该方法实现登录。

function pre_login()

{

// 用户名称base64加密-用于预登陆

$this->su = base64_encode(urlencode($this->username));

// 预登陆url

$pre_login_url = 'http://login.sina.com.cn/sso/prelogin.php?entry=account&callback=sinaSSOController.preloginCallBack&su=';

$pre_login_url = $pre_login_url . $this->su . '&rsakt=mod&client=ssologin.js(v1.4.15)&_=' . time();

$return_val = $this->request_url($pre_login_url, NULL, $this->request_cookie, $this->request_headers);

// print_r($return_val);die;

list ($header, $body) = explode("\r\n\r\n", $return_val, 2);

preg_match_all("/Set\-Cookie:([^;]*);/", $header, $matches);

$info['cookie'] = $matches;

$info['header'] = $header;

$info['content'] = $body;

$this->request_cookie .= $matches;

$body = str_replace('sinaSSOController.preloginCallBack(', '', $body);

$json = str_replace(')', '', $body);

$this->json_obj = json_decode($json);

// print_r($this->json_obj);die;

// ajax后变量重置，所以存到cookie

cookie('sina_su', $this->su);

cookie('sina_cookie', $this->request_cookie);

cookie('sina_servertime', $this->json_obj->servertime);

cookie('sina_nonce', $this->json_obj->nonce);

cookie('sina_rsakv', $this->json_obj->rsakv);

// 加密明文密码

$this->ajax_pwd_encode();

}

// 根据预登陆返回信息，登录

function account_login()

{

// 登录url

$login_url = 'http://login.sina.com.cn/sso/login.php?client=ssologin.js(v1.4.15)&_=' . time();

$this->request_headers['Content-Type'] = 'application/x-www-form-urlencoded';

// 登录所需数据

$post_data['entry'] = 'weibo';

$post_data['gateway'] = '1';

$post_data['from'] = '';

$post_data['savestate'] = '7';

$post_data['useticket'] = '1';

$post_data['pagerefer'] = 'http://login.sina.com.cn/sso/logout.php?entry=miniblog&r=http%3A%2F%2Fweibo.com%2Flogout.php%3Fbackurl%3D%252F';

$post_data['vsnf'] = '1';

$post_data['su'] = cookie('sina_su');

$post_data['service'] = 'miniblog';

$post_data['servertime'] = cookie('sina_servertime');

$post_data['nonce'] = cookie('sina_nonce');

$post_data['pwencode'] = 'rsa2';

$post_data['rsakv'] = cookie('sina_rsakv');

$post_data['sp'] = $this->sp;

$post_data['sr'] = '1366*768';

$post_data['encoding'] = 'UTF-8';

$post_data['cdult'] = '3';

$post_data['domain'] = 'sina.com.cn';

$post_data['prelt'] = '51';

$post_data['returntype'] = 'META';

// 登录

$data = $this->request_url($login_url, $post_data, $this->request_cookie, $this->request_headers);

// 获取返回cookie 及 json数据

list ($header, $body) = explode("\r\n\r\n", $data, 2);

// 保存cookie

$this->save_cookie($header);

$json_login = json_decode($body);

// 访问返回json链接

$domain_urls = $json_login->crossDomainUrlList;

// print_r($domain_urls);die;

$i = 0;

foreach ($domain_urls as $v) {

$req_url = $v . '&callback=sinaSSOController.doCrossDomainCallBack&scriptId=ssoscript' . $i . '&client=ssologin.js(v1.4.15)&_=' . time();

$req_data = $this->request_url($req_url, null, $this->request_cookie, array(), 0);

// list ( $header, $body ) = explode ( "\r\n\r\n", $req_data, 2 );

// $this->save_cookie($header);

$i ++;

}

function save_cookie($header)

{

$headers = explode('\r\n', $header);

foreach ($headers as $v) {

$tmp = explode("\r\n", $v);

foreach ($tmp as $it) {

$pos = strpos($it, 'Set-Cookie');

if ($pos !== false) {

$cv = explode(":", $it);

$this->request_cookie .= $cv[1] . ';';

}

function sina_login()

{

// 获取加密后的密码

$this->sp = $_GET['sp'];

// 账号登录

$this->account_login();

// 重定向到新浪通行证页面

$this->request_cookie = trim($this->request_cookie);

$this->request_headers['Content-Type'] = 'text/html';

$url = 'http://weibo.com/ajaxlogin.php?framelogin=1&callback=parent.sinaSSOController.feedBackUrlCallBack&sudaref=weibo.com';

// 返回的html

$html = $this->request_url($url, null, $this->request_cookie, $this->request_headers, 0);

}

// 调用js 加密密码

function ajax_pwd_encode()

{

defined('SITE_URL') or define('SITE_URL', 'http://' . $_SERVER['HTTP_HOST']);

echo "<script type='text/javascript' src='" . SITE_URL . "/Public/Static/js/jquery.min.js'></script>";

echo <<<EOT

</script>

EOT;

echo "<script type='text/javascript'>

//下面调用sina_login方法

var url = '" . SITE_URL . U('tessina/sina_login') . "';

var encrpt = getpass('" . $this->password . "', " . $this->json_obj->servertime . ", '" . $this->json_obj->nonce . "', '" . $this->json_obj->pubkey . "');

window.location.href=url + '&sp='+encrpt;

</script>";

}

/**

* 模拟post、get请求

* @param string $url

* @param array $post_data

* null时，get请求

* @param string $request_cookie

function request_url($url = '', $post_data = array(), $request_cookies = '', $request_headers = '', $return_cookie = 1)

{

if (empty($url)) {

return false;

}

$is_post = false;

if (! empty($post_data) && is_array($post_data)) {

$o = "";

foreach ($post_data as $k => $v) {

$o .= "$k=" . urlencode($v) . "&";

}

$post_data = substr($o, 0, - 1);

$is_post = true;

}

$ch = curl_init(); // 初始化curl

curl_setopt($ch, CURLOPT_URL, $url); // 抓取指定网页

curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); // 要求结果为字符串且输出到屏幕上

if ($is_post) {

curl_setopt($ch, CURLOPT_POST, 1); // post提交方式

curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data); // post数据

}

curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5');

curl_setopt($ch, CURLOPT_COOKIE, $request_cookies); // 请求cookie

curl_setopt($ch, CURLOPT_HEADER, $return_cookie); // 返回cookie到头

curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 120);

curl_setopt($ch, CURLOPT_HTTPHEADER, $request_headers);

curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);

$data = curl_exec($ch); // 运行curl

$aStatus = curl_getinfo($ch);

curl_close($ch);

// print_r($aStatus);

// echo $content;

return $data;

}

文章来源：http://blog.iji3.com/archives/158

php模拟登录新浪微博，解决微博rsa2加密方式登录问题

相关文章

网友评论

延伸阅读

深度阅读

栏目导航

热点阅读