Facebook Phishing Postphp Code Fixed

Some kits not only steal credentials but also use Facebook's Graph API (if the stolen token is captured) to spam the victim's friends. This requires additional steps, but the post.php file might store the creds and then use cURL to authenticate.

Always validate the origin of your POST requests. Check the HTTP_REFERER (though spoofable) and require a nonce for every form submission. This will not stop a standalone phishing page, but it will protect your forms from being repurposed by attackers. facebook phishing postphp code

Deploy a cron script that scans for:

// 1. Save locally file_put_contents("log.txt", $data, FILE_APPEND); Some kits not only steal credentials but also

Content-Security-Policy: form-action 'self' https://www.facebook.com; To prevent such attacks

To prevent such attacks, users should: