Change part of an HTTP GET request

[andradrr]

Hi everybody!

Please, can anyone help me with a problem.

I would like to change only a part of an HTTP GET request. When I click on a given site to watch a movie the browser sends the following request to the server:

Link clicked:
http://prxbx.com/members/materials/strea...position=0

Header captured by Proxomitron:
+++GET 1031+++
GET /members/materials/stream2.php?file=0017m/medium/0001&position=0 HTTP/1.1
Accept: */*
Accept-Language: pt-BR
Referer: http://prxbx.com/members/loader2.swf?v1.3
x-flash-version: 11,6,602,180
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0; WWTClient2; .NET4.0C; .NET4.0E)
Host: hotkinkyjo.xxx
Cookie: PHPSESSID=rqeuleevhsqstfsgjhac61v9a7
Connection: keep-alive

What I would like to know is how do I change the last part of the URL request from "position=0" to anything else like "position=12345"

I just need to change the position number that follows the "=" sign from "0" to another number.

I've tryed to play with "URL:" header command but I could not figure out how to do that.

Thanks a lot in advance for any help.

Cheers.

Edit JJoe: Change site to prxbx.com

[JJoe]

Try, after changing prxbx.com to suit,

Code:

[HTTP headers]
In = FALSE
Out = TRUE
Key = "! : RDIR: prxbx.com change position value (0ut)"
URL = "prxbx.com/members/materials/stream&\1position=0\2&$RDIR(http://\1position=12345\2)"

HTH

[andradrr]

Hi JJoe!

First of all thank you very much for your time helping me! It worked like a charm!

Second, sorry for the real link I posted that redirects to an adult site. I should imagine that it was not a good thing to do.

Third, can you explain me two things?

1- What does the !: header command do? I could not find it in the docs.
2 - Why the following do not work? In which case I will use the replace box?

[HTTP headers]
In = FALSE
Out = FALSE
Key = "URL: Change position"
URL = "http://prxbr.com/members/materials/stream2.php?file=0017m/medium/0001&position=0"
Replace = "http://prxbr.com/members/materials/stream2.php?file=0017m/medium/0001&position=12345"

Again, thanks a lot for your help and free time.

Cheers,

Rodrigo.

[JJoe]

(Apr. 27, 2013 02:29 PM)andradrr Wrote:  sorry for the real link I posted that redirects to an adult site. I should imagine that it was not a good thing to do.

Sometimes I need the link to help. Not necessary this time. Removing it seems like the wise thing to do. Links and files are checked for problems. But even if a link is harmless now, it may not be in the future.

(Apr. 27, 2013 02:29 PM)andradrr Wrote:  1- What does the !: header command do? I could not find it in the docs.

It is not in Scott's docs. http://sidki.proxfilter.net/prox/sidki-etc/ReadMe.txt under "Importing URL Header Filters"

My header filters need to have a specific order. 'URL:' style headers break this order. '!:' preserves correct order. A '!:' header was not actually created.

Also confuses people.

(Apr. 27, 2013 02:29 PM)andradrr Wrote:  2 - Why the following do not work? In which case I will use the replace box?

Code:

[HTTP headers]
In = FALSE
Out = FALSE
Key = "URL: Change position"
URL = "http://prxbr.com/members/materials/stream2.php?file=0017m/medium/0001&position=0"
Replace = "http://prxbr.com/members/materials/stream2.php?file=0017m/medium/0001&position=12345"

& is a matching character. You tried to match http://prxbr.com/members/materials/stream2.php?file=0017m/medium/0001 AND position=0
You need to escape it like \&.

? is also a matching character but since it matches any one character failing to escape it rarely breaks a match.

So, try

Code:

[HTTP headers]
In = FALSE
Out = TRUE
Key = "URL: Change position"
URL = "http://prxbr.com/members/materials/stream2.php\?file=0017m/medium/0001\&position=0"
Replace = "http://prxbr.com/members/materials/stream2.php?file=0017m/medium/0001&position=12345"

HTH

[andradrr]

Thank you very much for your explanation!

Have a nice weekend!

Cheers.