Welcome to WebmasterWorld Guest from 188.8.131.52
Can anyone think off the top of their heads why I wouldn't be able to login to my Yahoo! account with a script? I would think it would be as simple as submitting all of the form variables on mail.yahoo.com to wherever the form submits to (https://login.yahoo.com/config/login?)?
There are a TON of hidden inputs, so I submitted those as well, here is the querystring below (minus my login details of course).
Anyone have any ideas?
Once upon a time, PHP didn't care whether values were submitted by query string or HTTP body, they were all accessible regardless. This proved to be a vulnerability, so well-written code will now not accept query string values if it is not expecting them.
It's possible that Yahoo! don't want third-party scripts to be able to login to their site, so they could make it very tricky for you to get what you want from your Yahoo! account unless you just login the normal way.