PHP Id verification system ng national id using php any idea po?

[laxus456]

any idea po kung paano iverify yung id sa site na to: You do not have permission to view the full content of this post. Log in or register now.
bali ganto po, kailangan po maverify yung user using their national id kung legit sila
although di ko po alam kung paano gawin yung verification process automatically na pagkabigay nila ng qr code nila sa id nila ididirect sa "You do not have permission to view the full content of this post. Log in or register now." para macheck kung valid or hindi (ireretrieve sana yung output ng verification galing sa You do not have permission to view the full content of this post. Log in or register now. kung success ba or hindi)






tldr: balak ko is paginupload ng user yung qr ng national id, didiretso sa philsys checker to verify the validity (and retrieve output if success or not yung verification)
this is for our thesis under BSCS

 

[fireclouu]

di ako familiar how natl id qr works, pero kung may header , or magic number (identifier ng qr) ang data ng qr, pwede mo na iassume na yung qr ay national id data

example
50 48 4E 41 54 4C 49 44 ......(PHNATLID)

ganito yung header, pwede mo na siyang iredirect if it matches

di ko sure kung ito tanong ah hehe, pero kung mismong gamitin yung DB ng philsys, baka naman may api sila? or extract on their site how it works and how the datas are being passed to their servers, then hook your code etc.

 

[laxus456]

di ako familiar how natl id qr works, pero kung may header , or magic number (identifier ng qr) ang data ng qr, pwede mo na iassume na yung qr ay national id data

example
50 48 4E 41 54 4C 49 44 ......(PHNATLID)

ganito yung header, pwede mo na siyang iredirect if it matches

di ko sure kung ito tanong ah hehe, pero kung mismong gamitin yung DB ng philsys, baka naman may api sila? or extract on their site how it works and how the datas are being passed to their servers, then hook your code etc.

not particularly sure kung may static header sila, and sa site po nila meron pong option na scan from file , bali ang balak ko po sana is pag inupload ng user yung picture na inupload sa site namin "not yet deployed" is didiretso sana sa site nila para iupload. Although not particularly sure kung yun ang best and efficient way para gawin ang verification. and wala po akong makita na api para po para dun sa site nila kaya medyo di ko pa po alam gagawin

 

[m1k3y]

kung nagagawa lahat yan sa browser, pwede mo yan gawin gamit programming language, tingin ko need mo lang i capture ung sinisend and receive ng browser gamit ang isang packet sniffer like wireshark, at syempre analyze ung protocol na gamit which is hula ko puro HTTP inside a TLS. As long as gumagana sya sa browser mo gagana din yan basta lang ma simulate mo ung request ng browser and handling ng response ng philsys website sa gamit mong PL.

 

[fireclouu]

not particularly sure kung may static header sila, and sa site po nila meron pong option na scan from file , bali ang balak ko po sana is pag inupload ng user yung picture na inupload sa site namin "not yet deployed" is didiretso sana sa site nila para iupload. Although not particularly sure kung yun ang best and efficient way para gawin ang verification. and wala po akong makita na api para po para dun sa site nila kaya medyo di ko pa po alam gagawin

ah, parang getter(? di ako sigurado sa term) or initializer yung magiging site? meron kasi ako naencouter nito noon sa site ng company namin need ko ng data thru their servers to my site, what I did hinanap ko lang yung ajax call method sa script that communicates to their db

magiging häçky yung process mo nito since wala api, rely on how they return data back to client, use chrome debugger and step until makita mo yung call

ah, parang getter(? di ako sigurado sa term) or initializer yung magiging site? meron kasi ako naencouter nito noon sa site ng company namin need ko ng data thru their servers to my site, what I did hinanap ko lang yung ajax call method sa script that communicates to their db

magiging häçky yung process mo nito since wala api, rely on how they return data back to client, use chrome debugger and step until makita mo yung call

PS yung site ng company namin returns data as xml object , kung same ang philsys this will work, if POST method di ako masyado bihasa hehe

 

[laxus456]

ah, parang getter(? di ako sigurado sa term) or initializer yung magiging site? meron kasi ako naencouter nito noon sa site ng company namin need ko ng data thru their servers to my site, what I did hinanap ko lang yung ajax call method sa script that communicates to their db

magiging häçky yung process mo nito since wala api, rely on how they return data back to client, use chrome debugger and step until makita mo yung call


PS yung site ng company namin returns data as xml object , kung same ang philsys this will work, if POST method di ako masyado bihasa hehe

sir may marerecommend po ba kayong any study materials and apps(wireshark?) para po matrace ko po yung api request? di pa po ako masyadong aware sa network side nila to capture requests

 

[m1k3y]

meron sya API, di lang yata naka public i think, pagaralan mo ito You do not have permission to view the full content of this post. Log in or register now., quick inspection andito ung endpoint You do not have permission to view the full content of this post. Log in or register now. nung API, you need the chrome debugger to know what goes through there, sana makatulong.

 

[Zerobyte]

sa pagkakaalam ko,
pwede mo yan decode offline.
aralin mo source code nung site.