使用 curl PHP 登录 Instagram

Posted 2023-03-31

【中文标题】使用 curl PHP 登录 Instagram

【英文标题】：Instagram login using curl PHP

【发布时间】：2016-04-28 12:18:08

【问题描述】：

<?php
function instagram_login($data_sent_username, $data_sent_password)
  $data_filtered_data = instagram_gettoken();
  $data_rec_token = $data_filtered_data[0];
  $data_rec_mid = $data_filtered_data[1];
  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, 'https://www.instagram.com/accounts/login/ajax/');
  curl_setopt($ch, CURLOPT_POSTFIELDS, 'username='.urlencode($data_sent_username).'&password='.urlencode($data_sent_password));
  curl_setopt($ch, CURLOPT_POST, 1);
  curl_setopt($ch, CURLOPT_HEADER, 0);
  curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
  curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
  curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  curl_setopt($ch, CURLOPT_HTTPHEADER, array(
  'Host: www.instagram.com',
  'Connection: keep-alive',
  'Content-Length: 25',
  'Origin: https://www.instagram.com',
  'X-Instagram-AJAX: 1',
  'Content-Type: application/x-www-form-urlencoded; charset=UTF-8',
  'Accept: */*',
  'X-Requested-With: XMLHttpRequest',
  'X-CSRFToken: '.$data_rec_token.'',
  'DNT: 1',
  'Referer: https://www.instagram.com/accounts/login/',
  'Accept-Encoding: gzip,deflate',
  'Accept-Language: en-US',
  'Cookie: mid='.$data_rec_mid.'; ig_pr=1; ig_vw=1319; csrftoken='.$data_rec_token.''));
  curl_setopt($ch, CURLOPT_COOKIEFILE, getcwd() . '/instagram_cookie.txt');
  curl_setopt($ch, CURLOPT_COOKIEJAR, getcwd() . '/instagram_cookie.txt');
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (Khtml, like Gecko) Chrome/26.0.1410.43 Safari/537.31");
  $data_rec_page = curl_exec($ch) or die(curl_error($ch));
  echo $data_rec_page;

function instagram_gettoken()
  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, 'https://www.instagram.com/accounts/login/');
  curl_setopt($ch, CURLOPT_HEADER, 0);
  curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
  curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
  curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  curl_setopt($ch, CURLOPT_HTTPHEADER, array('application/x-www-form-urlencoded', 'charset=UTF-8'));
  curl_setopt($ch, CURLOPT_COOKIEFILE, getcwd() . '/instagram_cookie.txt');
  curl_setopt($ch, CURLOPT_COOKIEJAR, getcwd() . '/instagram_cookie.txt');
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31");
  curl_setopt($ch, CURLOPT_REFERER, "https://www.instagram.com/");
  $data_local_lines = file('instagram_cookie.txt');
  foreach($data_local_lines as $data_local_line) 
    if($data_local_line[0] != '#' && substr_count($data_local_line, "\t") == 6) 
      $data_filter_tokens = explode("\t", $data_local_line);
      $data_filter_tokens = array_map('trim', $data_filter_tokens);
      $data_filtered_data[] = $data_filter_tokens[6]; 
    
  
  return $data_filtered_data;

instagram_login("jackzett10","password");
?>

输出令人惊讶的是 json 格式，不知何故，我输入什么密码并不重要，我总是得到相同的输出：

"status":"ok","authenticated":false,"user":"jackzett10"

我花了一些时间来获得每个请求的令牌和中间权利，所以这不是问题。 如果我删除标头数组中的 cookie，输出不会改变 我从我在 burbsuite 中所做的登录请求中获取了标题。 有谁知道我在这里做错了什么？

【问题讨论】：

将CURLOPT_HEADER 设置为1 或true

@C0dekid 这确实改变了输出，因为它现在显示请求的标头，但最后仍然显示 "status":"ok","authenticated":false,"user" :"jackzett10" 有什么建议吗？

【参考方案1】：

1) 尝试添加-curl_exec($ch);

2) 保存证书文件并尝试。

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_CAINFO, getcwd() . "/ca/DigiCertHighAssuranceEVRootCA.crt");