Login with PHP curl and CSRF token

Question

I want login from a PHP script to another website but I always get this reply:

403 Error: CSRF token mismatch

I extract the CSRF token from

Answer 1

You are making your first request with file_get_contents and your second request with cURL.

You've set up a cookie jar for the second request, but not for the first request. Consequently, each of those two requests is starting a new session.

CSRF tokens are stored in the session by the server you are making the request to, so the token you get the first request won't match the token in the session for the second request.

You need to:

• Use cURL consistantly
• Use the same cookie jar for both requests