General Questions

On 1.32 and 1.33 we've used wget to backup the config on all our MW boxes, but this doesn't work on 1.34
The command line we use is:

Code:

/usr/bin/wget --post-data Submit=download --auth-no-challenge --no-check-certificate --http-user=user --http-password=password -q https://x.x.x.x:444/diag_backup.php -O fwbackup/backup.xml

The error we get is:
Bad request token. Please make sure cookies are enabled and try again

I haven't found any answer to this problem. Does anyone know what the reason for the error is?

reg
Svend

Likely related to the changes made in the way GETs are handled in the 1.34 release. Have you reviewed the changes listed here?

http://m0n0.ch/wall/downloads.php

I saw that, but I'm accessing diag_backup.php, and that's not mentioned.

Should it be enough to do two wget after each other? I've tried that, but with the same error message

On 1.32 and 1.33 we've used wget to backup the config on all our MW boxes, but this doesn't work on 1.34
The command line we use is:
/usr/bin/wget --post-data Submit=download --auth-no-challenge --no-check-certificate --http-user=user --http-password=password -q https://x.x.x.x:444/diag_backup.php -O fwbackup/backup.xml

You need this string:

/usr/bin/wget --post-data Submit=Download%20configuration --auth-no-challenge --no-check-certificate --http-user=user --http-password=password -q https://x.x.x.x:444/diag_backup.php -O fwbackup/backup.xml

Look at source HTML:

Thank you for your reply, but I get the same error message with your line.

Thank you for your reply, but I get the same error message with your line.

post here the query string and result.

It's in the first post of this thread

It's in the first post of this thread

what version wget ?

GNU Wget 1.13.4 built on linux-gnu

I saw that, but I'm accessing diag_backup.php, and that's not mentioned.

It's not mentioned but it definitely requires a token. In fact every page of the webgui requires a token.

Ok, but what's a token in this context?

The CSRF magic token that has been introduced in 1.34

Ok, thank you.
When I do a:

Code:

/usr/bin/wget --auth-no-challenge --no-check-certificate --http-user=backup --http-password=password -q https://x.x.x.x/diag_backup.php -O out.debug

I just get the complete file.
What am I doing wrong?

Hello: I am a user and I have mounted Monowall few, till the Moneto to copies of the configuration with q WGET But I find the new version has (The magic CSRF token, anyone can help me and show a basic example of how you might do with (WGET). thanks

I use the following line:


wget -q  http://xxxxxxxxxx.Dyndns.org:9091/diag_backup.php --http-user=xxxxxxxxxx --http-passwd=xxxxxxxxx  Submit=Download -O C:\Alix\Backup.xml

Pardon my English