How to find source for .PHP script via web?

[schuc]

Hi All

I am writing a script to grab the latest versions of a few free security programs and I have that all working(with some tips from Wakillon on how to get and then extract the direct file download link from the html source of the page).

The issue I am having is that for SuperAntiSpyware, there is a link on the main page(http://www.superantispyware.com/portablescanner.html) to download the file, but the link is to a .PHP script and I am not able to use _GetSourceCode() on a .PHP file, it seems.

Any help or suggestions are welcome.

Local $_String = _GetSourceCode ( 'http://www.superantispyware.com/sasportable.php' )
MsgBox(0, "", $_String) ; $_String does not contain .php file contents

[shanet]

The only way to get PHP script is to find a vulnerability in a site, hack it and literally FTP the file over. Which is illegal.

With PHP, the page is precomputed and sent to you as an HTML page. This PHP script most likely is a re-directing script.Find where it redirects, and you have your required link.

shanet.

[schuc]

The only way to get PHP script is to find a vulnerability in a site, hack it and literally FTP the file over. Which is illegal.

With PHP, the page is precomputed and sent to you as an HTML page. This PHP script most likely is a re-directing script.Find where it redirects, and you have your required link.

Thanks for your reply. Yea, I'm definitely not looking to hack into anyone website. I'm just trying to get the latest version of free software. The PHP is probably being used to generate the random filename created for download.

[schuc]

That big red button redirects to the most recent file in this directory. http://www.superantispyware.com/downloads/temp/

This link is the same except the files are sorted by the Last modified value. Get the source of this page, find the last link, and that will be the most recent version of the program. http://www.superantispyware.com/downloads/temp/?M=A

Cool...how did you find the redirect being to 'http://www.superantispyware.com/downloads/temp/'? I wasn't able to determine that with the ways I was trying.

My concern about parsing and grabbing a file from that TEMP directory is that I wouldn't know what file to grab. Every time you click on the red button on the main page, it seems the PHP file is creating a temp named version of the file to download. This is easy to see by clicking on the red button, noting the random download filename, then look at the temp directory you discovered. The new file will be there.

[schuc]

My concern about parsing and grabbing a file from that TEMP directory is that I wouldn't know what file to grab

Deathbringer, you pretty much nailed it! I am able to get the original(unprocessed/unrenamed) file by looking a directory up from temp http://www.superantispyware.com/downloads/.

Would you please tell me how you were able to determine the redirect went to 'http://www.superantispyware.com/downloads/'? That was the piece I was missing which held me up.

Thanks!

[schuc]

It's been a long time since I've used the default Firefox downloader, but I'm pretty sure the Copy Source URL is in there too.

Right you are. I was just looking at html source and such and didn't look at the Firefox downloader. Sure enough, there is a 'Copy Download Link' option in the downloader window.

Thanks a lot.