1. // 新浪微博登录密码加密函数
2. // password   密码明文
3. // servertime 提交的参数之一
4. // nonce      提交的参数之一
5. // encode_password 输出的加密后的16进制字符串,40个字符
6. // 返回 encode_password 的长度, 失败则返回0
7. PASSENCODE_API int SinaSha1Encode(char *password, char *servertime, char *nonce, char *encode_password)
8. {
9. if (encode_password)
10. {
11. encode_password[0]=NULL;
12. //定义要sha1的字符串
13. char pTemp[400]={0};
14. //定义返回的sha1值
15. char szHash[41] ={0};
16. strcpy(pTemp,password);
17. SHA1((unsigned char*)pTemp, szHash, 41);
18. strcpy(pTemp,szHash);
19. SHA1((unsigned char*)pTemp, szHash, 41);
20. strcpy(pTemp,szHash);
21. if (servertime) strcat(pTemp,servertime);
22. if (nonce) strcat(pTemp,nonce);
23. SHA1((unsigned char*)pTemp, szHash, 41);
24. strcpy(encode_password,szHash);
25. return strlen(encode_password);
26. }
27. return 0;
28. }
29. //登陆伪代码
30. //***********************************************
31. ByteBuffer bytes;
32. string url;
33. string username="zhanghao@sina.com";
34. string password="mima";
35. string encode_password;
36. url="http://login.sina.com.cn/sso/prelogin.php?&entry=sso&username=";
37. url+=username;
38. url+="&callback=parent.sinaSSOController.loginCallBack";
39. BOOL bHtmlText;
40. BOOL bUTF8;
41. string retcode;
42. string servertime;
43. string nonce;
44. if (GetUrlData(url.c_str(),bytes,NULL,0,bHtmlText,bUTF8) && bytes.getLength() && bHtmlText)
45. {
46. string str=bytes.c_str();
47. string::size_type pos(0),posend(0);
48. if( (pos=str.find("{",posend))!=string::npos && (posend=str.find("}", ++pos))!=string::npos )
49. {
50. string result=str.substr(pos,posend-pos);
51. replace_all(result,"\"","");
52. TRACE(result.c_str());
53. vector<string> vars;
54. Split(result,vars,",");
55. if (vars.size())
56. {
57. for (int i=0;i<vars.size();i++)
58. {
59. vector<string> keys;
60. Split(vars[i],keys,":");
61. if (keys.size()==2)
62. {
63. if (keys[0]=="retcode")
64. {
65. retcode=keys[1];
66. }else
67. if (keys[0]=="servertime")
68. {
69. servertime=keys[1];
70. }else
71. if (keys[0]=="nonce")
72. {
73. nonce=keys[1];
74. }else{
75. TRACE("key:%s val:%s",keys[0].c_str(),keys[1].c_str());
76. }
77. }
78. }
79. }
80. }
81. }
82. if (atoi(retcode.c_str())==0)
83. {
84. EncodePasword(password,servertime,nonce,encode_password);
85. TRACE("servertime:%s",servertime.c_str());
86. TRACE("nonce:%s",nonce.c_str());
87. TRACE("encode_password:%s",encode_password.c_str());
88. url="http://login.sina.com.cn/sso/login.php?client=ssologin.js(v1.3.12)";
89. string post;
90. /*
91. service=miniblog&client=ssologin.js%28v1.3.12%29&entry=miniblog&encoding=utf-
92. 8&gateway=1&savestate=7&from=&useticket=1&username=diyiwl@sina.com&servertime=1306503150&nonce=IN4GY9&pwencode=wsse&password=74dd6f5f82e027412b6da345909f0df450b5f410&url=http%
93. 3A%2F%2Fweibo.com%2Fajaxlogin.php%3Fframelogin%3D1%26callback%3Dparent.sinaSSOController.feedBackUrlCallBack&returntype=META&ssosimplelogin=1
94. */
95. post="service=miniblog&client=ssologin.js%28v1.3.12%29&entry=miniblog&encoding=GB2312&gateway=1&savestate=7&from=&useticket=1&username=";
96. post+=username;
97. post+="&servertime=";
98. post+=servertime;
99. post+="&nonce=";
100. post+=nonce;
101. post+="&pwencode=wsse&password=";
102. post+=encode_password;
103. post+="&url=http%3A%2F%2Fweibo.com%2Fajaxlogin.php%3Fframelogin%3D1%26callback%3Dparent.sinaSSOController.feedBackUrlCallBack&returntype=META&ssosimplelogin=1";
104. TRACE(url.c_str());
105. TRACE(post.c_str());
106. if (GetUrlData(url.c_str(),bytes,post.c_str(),post.length(),bHtmlText,bUTF8) && bytes.getLength() && bHtmlText)
107. {
108. TRACE(bytes.c_str());
109. }
110. }
111. //**********************************************

• 把密码进行一次SHA1加密，结果再进行一次SHA1加密
• 把经过两次SHA1加密的结果附上servertime,nonce再进行一次SHA1加密
• 加密的结果作为登录密码

c3d2&url:http://www.baidu.com&returntype:META&ssosimplelogin:1