Http post request-body

Question

I am trying to use lua to write a script to get some data from a website: www.baidu.com (which is popular in China), but this requires authentication, and anyone can register a site. When I enter the site, I use Fiddler to capture the session, and I found that the request body has several variable parameters, for example:

ppui_logintime=14084&charset=UTF-8&codestring=&token=9fcf00d59b6b9860937a70c221??95d818&isPhone=false&index=0&u=http%3A%2F%2Fwww.baidu.com%2F&safeflg=0&staticpage??=https%3A%2F%2Fpassport.baidu.com%2Fv2Jump.html&loginType=1&tpl=mn&callback=paren??t.bdPass.api.login._postCallback&username=test&password=test&verifycode=&mem_pass??=on 

The value of ppui_logintime and token, where are they from? And what did they usually do?

Any help / advice / suggestions were greatly appreciated.

Answer 1

The values ​​are taken from the HTML web form with which users register on the site. It contains hidden fields, not just the fields that the user sees on the screen. When the web server delivers HTML to the browser, these hidden fields contain values ​​that are sent back to the web server along with the values ​​that the user enters. This is how HTML forms work in general.