<?php
/* 
* 得到網頁內容 
* 參數：$host [in] string
*      主機名稱（例如： www.imsorry.com.cn）
* 參數：$method [in] string
*      提交方法：post, get, head ... 并加上相應的參數( 具體語法參見 rfc1945，rfc2068 )
* 參數：$str [in] string
*      提交的內容
* 參數：$sessid [in] string
*      php的sessionid
*
* @返回 網頁內容 string
*/
function getwebcontent($host, $method, $str, $sessid = '')
{
    $ip = gethostbyname($host);
    $fp = fsockopen($ip, 80);
    if (!$fp) return;
    fputs($fp, "$method/r/n");
    fputs($fp, "host: $host/r/n");
    if (!empty($sessid))
    {
        fputs($fp, "cookie: phpsessid=$sessid; path=/;/r/n");
    }
    if ( substr(trim($method),0, 4) == "post")
    {
        fputs($fp, "content-length: ". strlen($str) . "/r/n"); //  別忘了指定長度
    }
    fputs($fp, "content-type: application/x-www-form-urlencoded/r/n/r/n");
    if ( substr(trim($method),0, 4) == "post")
    {
        fputs($fp, $str."/r/n");
    }
    while(!feof($fp))
    {
        $response .= fgets($fp, 1024);
    }
    $hlen = strpos($response,"/r/n/r/n"); // linux下是 "/n/n"
    $header = substr($response, 0, $hlen);
    $entity = substr($response, $hlen + 4);
    if ( preg_match('/phpsessid=([0-9a-z]+);/i', $header, $matches))
    {
        $a['sessid'] = $matches[1];
    }
    if ( preg_match('/location: ([0-9a-z/_/?/=/&/#/.]+)/i', $header, $matches))
    {
        $a['location'] = $matches[1];
    }
    $a['content'] = $entity;    
    fclose($fp);
    return $a;
}

/* 構造用戶名，密碼字符串 */
$str = ("username=test&password=test");
$response = getwebcontent("localhost","post /login.php http/1.0", $str);
echo $response['location'].$response['content']."<br>";
echo $response['sessid']."<br>";
if ( preg_match('/error/.php/i',$response['location']))
{
    echo "登陸失敗<br>";
} else {
    echo "登陸成功<br>";
    // 不可以訪問user.php，因為不帶sessid參數
    $response = getwebcontent("localhost","get /user.php http/1.0", '', '');
    echo $response['location']."<br>"; // 結果：error.php?errcode=2

    // 可以訪問user.php
    $response = getwebcontent("localhost","get /user.php http/1.0", '', $response['sessid']);
    echo $response['location']."<br>"; // 結果：user.php
}
?>