webmail login using cURL

[larwilliams]

Hi,

I am attempting to use the following code to login to webmail using cURL and PHP. It is able to login (I am able to get it to display the logged in content), but it doesn't do the redirect to the webmail page, instead just spitting back the html itself it seems.

<?php
error_reporting(E_ALL);

// get user name and password from $_POST
$cpanelemail = $_POST['emailaddress'];
$cpanelemailpass = $_POST['pass'];

if ($cpanelemail != '' || $cpanelemailpass != '') {
// build cPanel webmail URL
$post2 = array();
$post2['user'] = $cpanelemail;
$post2['pass'] = $cpanelemailpass;
$post2['goto_uri'] = '/';
$post['login_theme'] = 'cpanel';

//print_r($post2);
$url = 'https://xxx.site.com:2096/login/';
//$cookie="cpanel_cookie.txt";

$ch = curl_init();
curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
curl_setopt($ch, CURLOPT_COOKIEJAR, 'Ocookie.txt');
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);

//$content = curl_exec($ch);
curl_exec($ch);
//curl_close($ch);

//print $content;
}
else {
// empty variables / no login details provided
print header("Location: cpanel_login.php?failed=2");
}

//exit;
?>

[cPanelDavidG]

You may want to take a look at LogMeIn.pm - http://forums.cpanel.net/437949-post5.html

[cPanelMatt]

On your server are you using cookie auth or HTTP auth?

Most cPanel servers (and by default) use HTTP auth (which is the pop up box that asks for user name and pass) in that case, you can use fairly generic code to login to the webmail page like what's described in the following article Using cURL and libcurl with PHP no need to go to /login/ at all.

After running this, when printing the output of curl_exec does it show "Login Attempt Failed" at all?

[larwilliams]

You guys are both awesome. I was inspired by David's suggestion of LogMeIn.pm to do something similar in PHP (using my current code, getting the session name and then passing it to a new Location: header).

The problem was that cURL wasn't handling relative paths properly (completely ignoring them) and was simply returning the logged in page instead.

Thanks guys!