Solved

Retreiving Form "action" value using WINHTTP.WINHTTPREQUEST object!

Posted on 2003-11-11
9
2,022 Views
Last Modified: 2010-07-27
I am using the winhttp.winhttprequest.5 object to access a web page within an asp script using visual basic script.  I can access the web page that I need and can tell from the response headers that I have the right page.  I was wondering if there was a way to retreive the "action" attribute value of a form on the url that was requested using the send method.  I can get a the value embedded in the response headers.  Although my problem is that the length of the value of the attribute "action" changes each time so that it makes it difficult to retreive only the action value from the response headers.  Is their any way to retreive only the "action" value.
0
Comment
Question by:Tgerdes
  • 5
  • 4
9 Comments
 
LVL 58

Expert Comment

by:amit_g
Comment Utility
No you cannot simply get the single attribiue value. All the posted values are separated by & and use format AttributeName=AttributeValue. So you can split the string based on separator & and then individual elements again could be splitted by separator =. Then you have both values with you.
0
 
LVL 1

Author Comment

by:Tgerdes
Comment Utility
are you saying to split the response headers text string using an "&" what would the vbscript code look like?
0
 
LVL 58

Expert Comment

by:amit_g
Comment Utility
Not the complete code but something like this ...

sString = "A1=AValue1&A2=AValue2"
arrNameValues = Split(sString, "&")

for i = LBound(arrNameValues) to UBound(arrNameValues)
    sNameValue = arrNameValues(i)
    arrTemp = Split(sNameValue, "=")
    sName = arrTemp(0)
    sValue = arrTemp(1)
next
0
 
LVL 1

Author Comment

by:Tgerdes
Comment Utility
The response text that I get back is the same that you would get from viewing the source on and IE web page.  Is there another command or way to retreive the values of the form being displayed!  similar to what I would do with a "request("?????") used in vbscript?
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 1

Author Comment

by:Tgerdes
Comment Utility
How do I get the "sString" array with the "A1=AValue1&A2=AValue2" in it?
0
 
LVL 58

Accepted Solution

by:
amit_g earned 500 total points
Comment Utility
Oh I got it wrong. I thought you are getting the posted values. You are getting the the complete HTML in the response. It is little difficult to get the action but you can try regular expresstion ...

<%
      Dim oRegExp, sString, sAction

      sString = "<form name=""annything"" action=""TheAction.asp"">"
      'sString = "<form name=""annything"" action='TheAction.asp'>"
      'sString = "<form name=""annything"" action=TheAction.asp>"

      Set oRegExp = New RegExp
      oRegExp.Global = True
      oRegExp.Pattern = ".*action=[""']*([^ >""']*).*"
      sAction = oRegExp.Replace(sString, "$1")
      Response.Write sAction
      Set oRegExp = Nothing
%>
0
 
LVL 1

Author Comment

by:Tgerdes
Comment Utility
I am trying to extract the action value.  This code seems to be replacing it with "$1".  How would I extract the the action value into a string!  In your example the value "TheAction.asp"
0
 
LVL 1

Author Comment

by:Tgerdes
Comment Utility
The Answer given by amit_g was close and his pattern worked well to retreive value.  Only the code that he gave would not work to retreive the value!   I needed to use the "execute" method instead of the replace method.  The execute method can be retreived to a matches collection, and the subpattern in the pattern can be retreived to a subMatches collection!  Anyway here is the code if anyone is interested!
   
   dim oRegExp, Match, Matches, sAction, AnyString, SubMatches
   set oRegExp = new RegExp
   oRegExp.Global = True
   oRegExp.Pattern = ".*action=[""']*([^ >""']*).*"
   Set Matches = oRegExp.Execute(AnyString)
   Set Match = Matches(0)
   sAction = Match.SubMatches(0)
   Set oRegExp = Nothing
0
 
LVL 58

Expert Comment

by:amit_g
Comment Utility
The replace also does the same thing i.e. replace the whole string with $1 and that is the first sub match i.e. the action. I was trying to save a few lines of code. Run the code as it is posted and you will see "TheAction.asp" as output in sAction.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

I have helped a lot of people on EE with their coding sources and have enjoyed near about every minute of it. Sometimes it can get a little tedious but it is always a challenge and the one thing that I always say is:  The Exchange of information …
I was asked about the differences between classic ASP and ASP.NET, so let me put them down here, for reference: Let's make the introductions... Classic ASP was launched by Microsoft in 1998 and dynamically generate web pages upon user interact…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now