I'm trying to log into a site and afterwards to send a SMS (you can do that for free by the site - it's nothing more than just enter some text into some fields and 'submit'). I've used wireshark to track some of the post/get requests that my machine has been exchanging with the server - when using the browser.

I'd like to paste some of my Java code:

URL url;
String urlP = "maccount=myRawUserName7&" +
        "mpassword=myRawPassword&" +
        "redirect_http=http&" +
        "submit=........";

String urlParameters = URLEncoder.encode(urlP, "CP1251");

HttpURLConnection connection = null;

// Create connection
url = new URL("http://www.mtel.bg/1/mm/smscenter/mc/sendsms/ma/index/mo/1");
connection = (HttpURLConnection) url.openConnection();
connection.setRequestMethod("POST");
//I'm not really sure if these RequestProperties are necessary 
//so I'll leave them as a comment
// connection.setRequestProperty("Content-Type",
// "application/x-www-form-urlencoded");
// connection.setRequestProperty("Accept-Charset", "CP1251");
// connection.setRequestProperty("Content-Length",
// "" + Integer.toString(urlParameters.getBytes().length));
// connection.setRequestProperty("Content-Language", "en-US");

connection.setUseCaches(false);
connection.setDoInput(true);
connection.setDoOutput(true);

// Send request

DataOutputStream wr = new DataOutputStream(
                connection.getOutputStream());
wr.writeBytes(urlParameters);
wr.flush();
wr.close();

String headerName[] = new String[10]; 
int count = 0;
for (int i = 1; 
         (headerName[count] = connection.getHeaderFieldKey(i)) != null; i++) {
    if (headerName[count].equals("Set-Cookie")) {
          headerName[count++] = connection.getHeaderField(i);
    }
}

//I'm not sure if I have to close the connection here or not            
if (connection != null) {
    connection.disconnect();
}
//the code above should be the login part 
//-----------------------------------------

//this is copy-pasted from wireshark's info.        
String smsParam="from=men&" +
        "sender=0&" +
        "msisdn=359886737498&" +
        "tophone=0&" +
        "smstext=tova+e+proba%21+1.&" +
        "id=&" +
        "sendaction=&" +
        "direction=&" +
        "msgLen=84";

url = new URL("http://www.mtel.bg/moyat-profil-sms-tsentar_3004/" + 
                                       "mm/smscenter/mc/sendsms/ma/index");

connection = (HttpURLConnection) url.openConnection();
connection.setRequestMethod("POST");
connection.setRequestProperty("Cookie", headerName[0]);
connection.setRequestProperty("Cookie", headerName[1]);
        //conn
urlParameters = URLEncoder.encode(urlP, "CP1251");
connection.setUseCaches(false);
connection.setDoInput(true);
connection.setDoOutput(true);
wr = new DataOutputStream(
        connection.getOutputStream());
wr.writeBytes(urlParameters);
wr.flush();
wr.close();

//I'm not rly sure what exactly to do with this response.
// Get Response
InputStream is = connection.getInputStream();
BufferedReader rd = new BufferedReader(new InputStreamReader(is,
                            "CP1251"));
String line;
StringBuffer response = new StringBuffer();
while ((line = rd.readLine()) != null) {
    response.append(line);
    response.append('\r');
}
rd.close();
System.out.println(response.toString());

if (connection != null) {
    connection.disconnect();
}

so that's my code so far. When I execute it ... I don't receive any text on my phone - so it clearly doesn't work as supposed to. I would appreciate any guidance or remarks. Is my cookie handling wrong? Is my login method wrong? Do I pass the right URLs. Do I encode and send the parameter string correctly? Is there any addition valuable data from these POSTs I should take?

P.S. just in any case let me tell you that the username and password is not real. For security reasons I don't want to give valid ones. (I think this is appropriate approach)

Here are the POST requests:

POST /1/mm/auth/mc/auth/ma/index/mo/1 HTTP/1.1

Host: www.mtel.bg

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-us,en;q=0.5

Accept-Encoding: gzip, deflate

Connection: keep-alive

Referer: http://www.mtel.bg/1/mm/smscenter/mc/sendsms/ma/index/mo/1

Cookie: __utma=209782857.541729286.1349267381.1349270269.1349274374.3; __utmc=209782857; __utmz=209782857.1349267381.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __atuvc=28%7C40; PHPSESSID=q0mage2usmv34slcv3dmd6t057; __utmb=209782857.3.10.1349274374

Content-Type: multipart/form-data; boundary=---------------------------151901450223722

Content-Length: 475



-----------------------------151901450223722

Content-Disposition: form-data; name="maccount"



myRawUserName

-----------------------------151901450223722

Content-Disposition: form-data; name="mpassword"


myRawPassword

-----------------------------151901450223722

Content-Disposition: form-data; name="redirect_https"



http

-----------------------------151901450223722

Content-Disposition: form-data; name="submit"



........

-----------------------------151901450223722--




HTTP/1.1 302 Found

Server: nginx

Date: Wed, 03 Oct 2012 14:26:40 GMT

Content-Type: text/html; charset=Utf-8

Connection: close

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Location: /moyat-profil-sms-tsentar_3004/mm/smscenter/mc/sendsms/ma/index

Content-Length: 0

The above text is vied with wireshark's follow tcp stream when pressing the log in button.

POST /moyat-profil-sms-tsentar_3004/mm/smscenter/mc/sendsms/ma/index HTTP/1.1

*same as the above ones*

Referer: http://www.mtel.bg/moyat-profil-sms-tsentar_3004/mm/smscenter/mc/sendsms/ma/index

Cookie: __utma=209782857.541729286.1349267381.1349270269.1349274374.3; __utmc=209782857; __utmz=209782857.1349267381.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __atuvc=29%7C40; PHPSESSID=q0mage2usmv34slcv3dmd6t057; __utmb=209782857.4.10.1349274374

Content-Type: application/x-www-form-urlencoded

Content-Length: 147



from=men&sender=0&msisdn=35988888888&tophone=0&smstext=this+is+some+FREE+SMS+text%21+100+char+per+sms+only%21&id=&sendaction=&direction=&msgLen=50



HTTP/1.1 302 Found

Server: nginx

Date: Wed, 03 Oct 2012 14:31:38 GMT

Content-Type: text/html; charset=Utf-8

Connection: close

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Location: /moyat-profil-sms-tsentar_3004/mm/smscenter/mc/sendsms/ma/success/s/1

Content-Length: 0

The above text is when you press the send button.