[resolved] PHP whois

champ_rock · 05-23-2007, 09:08 AM

hi

please tell me what php code do i have to write for getting the whois information of a particular domain from the registry?

i am looking for only .com and .net registries right now

thanks

Peter · 05-23-2007, 09:32 AM

The following works for getting whois information:-

PHP Code:

  <?php

$sock = fsockopen('whois.internic.net',43);

fputs($sock,'namepros.com'."\r\n");

while(!feof($sock))

{

    $info .= fgets($sock,128);

}

 
fclose($sock);

echo $info

?>

The result is in $info (and of course in this example the whois server is hard coded as is the domain name).

dhscott · 05-23-2007, 10:35 AM

My script checks whois.crsnic.net which should refer to each individual registrars whois server, and if it can't connect to crsnic for whatever reason, it connects to internic instead.

Same code though essentially.

champ_rock · 05-23-2007, 10:42 AM

please tell me which one of the two should i use ? which is better?

champ_rock · 05-27-2007, 06:29 AM

i used the code and it worked perfectly

can u please explain some things to me that i fail to grasp:
1. why are we using

Code:

$info .= fgets($sock,128);

doesn't is mean $info=fgets($sock,128) . $info ?
what is the use of Concatenate here?

2. what is 128 in the fget()?

thanks

tristanperry · 05-27-2007, 07:07 AM

1) The concatenate is used to add the string (fgets($sock,128)

to the $info variable (i.e. because then, after the loop's complete, "echo $info" can be used in one go to echo everything). But yes, "$info=fgets($sock,128) . $info" should also do the same thing.

2) The 128 is the maximum length of what's returned by the results

Peter · 05-27-2007, 08:51 AM

Yes as tristanperry stated the 128 is the amount of bytes to read at a time. The reason we specify it as the PHP manual specifies that it is more resource efficient to do so (http://php.net/fgets)

Regarding the $info .= fgets($sock,128); line it achieves exactly the same as what you wrote but is just another way of doing it.

champ_rock · 05-27-2007, 10:10 AM

thanks guys..

but there seems to be a problem with bulk whois checkups. does any body know how to successfuly conduct checks?

thanks

maximum · 05-27-2007, 10:34 AM

Quote:

Originally Posted by champ_rock

thanks guys..

but there seems to be a problem with bulk whois checkups. does any body know how to successfuly conduct checks?

thanks

The registries don't like spam-bots/email-harvesters from hitting the registry with too many requests too fast, so they place limits. PIR (the .org registry) is especially known for this. Try adding PHP's sleep() or usleep() functions in conjunction with set_time_limit() to delay each query to avoid this problem.

champ_rock · 05-27-2007, 10:36 AM

lol email harvesting..

i thought that whois queries were generally used for checking doamin availabilities

thanks.. i will use the sleep() function

Peter · 05-27-2007, 02:56 PM

Some spammers use whois results to harvest email accounts as stated by maximum.

Another method than using usleep etc is by using more than 1 whois server and alternate between which ones you use.

champ_rock · 05-27-2007, 09:30 PM

i guess the 2 whois servers for querying .com and .net names are crsnic and internic right?

maximum · 05-28-2007, 06:56 AM

whois.verisign-grs.net

samuofm · 05-30-2007, 12:37 PM

thanks to this thread I wrote a simple scanner last night, it alternates between 3 whois servers.

champ_rock · 05-30-2007, 08:29 PM

Quote:

Originally Posted by samuofm

thanks to this thread I wrote a simple scanner last night, it alternates between 3 whois servers.

i gues the registry is doing some kind of updates because sometimes i am able to do bulk checks and after some days the scanner starts giving errors

Peter · 05-30-2007, 11:44 PM

Quote:

Originally Posted by samuofm

thanks to this thread I wrote a simple scanner last night, it alternates between 3 whois servers.

cool glad it inspired you

Quote:

Originally Posted by champ_rock

i gues the registry is doing some kind of updates because sometimes i am able to do bulk checks and after some days the scanner starts giving errors

What sort of response are you getting from them when you get an error?

champ_rock · 06-01-2007, 06:30 AM

here is the error

Quote:

Warning: fsockopen() [function.fsockopen]: unable to connect to whois.crsnic.net:43 in /home/XXXXXX/public_html/XXXXXX/index.php on line 11

Warning: fputs(): supplied argument is not a valid stream resource in /home/XXXXX/public_html/XXXXX/index.php on line 12

Warning: feof(): supplied argument is not a valid stream resource in /home/XXXXX/public_html/XXXX/index.php on line 13

Warning: fgets(): supplied argument is not a valid stream resource in /home/XXXX/public_html/XXXX/index.php on line 15

Barrucadu · 06-01-2007, 07:29 AM

That means that the whois servers are denying your connection requests. Or, a part of the network between your server and the whois server is down.

champ_rock · 06-01-2007, 08:27 AM

ya it is denying my requests.

this is happening after i check about 10-12 domains

if anyone finds a solution to this then it would be great

monaco · 06-01-2007, 12:44 PM

What I'd like to know is how you get around the issue of some registrar's not listing complete info in their whois registries and forcing you to use a web interface with a captcha to get the information.

Peter · 06-01-2007, 08:26 PM

Quote:

Originally Posted by monaco

What I'd like to know is how you get around the issue of some registrar's not listing complete info in their whois registries and forcing you to use a web interface with a captcha to get the information.

Have you got an example of such a domain that requires this?

Quote:

Originally Posted by champ_rock

ya it is denying my requests.

this is happening after i check about 10-12 domains

if anyone finds a solution to this then it would be great

The only possible solutions are as follows:-

1) Find out how many queries you can make in x amount of time and use sleep or usleep to ensure you do not do too many queries.
2) Use more than 1 whois server to find the results.
3) Use a bank of proxies that will help.

The best solution is a combination of options 1 and 2. Option 3 should be avoided as it could end up you being permanently banned from using the whois server in question.

rocko78 · 06-02-2007, 05:40 PM

Thanks for this tool!
Can anybody just tell how to get the available or not status? I mean if the domain is available show XXXX and if not show "YYYY"

Thanks!

champ_rock · 06-02-2007, 10:06 PM

Quote:

Originally Posted by peter@flexiwebhost

The only possible solutions are as follows:-

1) Find out how many queries you can make in x amount of time and use sleep or usleep to ensure you do not do too many queries.
2) Use more than 1 whois server to find the results.
3) Use a bank of proxies that will help.

The best solution is a combination of options 1 and 2. Option 3 should be avoided as it could end up you being permanently banned from using the whois server in question.

1. i do not think there is any time limit. i have tried sleep(5) and sometimes it gives me an error with that also. sometimes it runs fine even without any sleep

2. different whois servers is definately a help. i will rotate between those three servers that u mentioned

3. proxies: i think that requires
a. more advanced coding which i am not familiar with
b. good proxies are hard to find therefore the script will hardly function when any proxy goes down

zoki · 06-02-2007, 10:25 PM

are you running that on your local server ? or on real hosting ?

Maybe if its on real hosting (exp. GoDaddy) there are more
whois lookups from other machines / ppls trying to register domains etc.

champ_rock · 06-02-2007, 10:49 PM

it is on a shared hosting. the servers are at "LayeredTech"

i think that might be the case. i will try to switch my hosting for this purpose. may be it will work then

05-23-2007, 09:08 AM	#1 (permalink)
champ_rock Senior Member Join Date: Oct 2006 Location: http://akshayjain.org Posts: 2,768 8,037.05 NP$ (Donate)	PHP whois hi please tell me what php code do i have to write for getting the whois information of a particular domain from the registry? i am looking for only .com and .net registries right now thanks __________________ Akshay Jain ......................

05-23-2007, 09:32 AM	#2 (permalink)
Peter Senior Member Join Date: Nov 2003 Location: Scotland Posts: 4,900 0.60 NP$ (Donate)	The following works for getting whois information:- PHP Code: `<?php $sock = fsockopen('whois.internic.net',43); fputs($sock,'namepros.com'."\r\n"); while(!feof($sock)) { $info .= fgets($sock,128); } fclose($sock); echo $info ?>` The result is in $info (and of course in this example the whois server is hard coded as is the domain name).

05-23-2007, 10:35 AM	#3 (permalink)
dhscott Senior Member Join Date: Apr 2006 Location: London, UK Posts: 1,346 228.75 NP$ (Donate)	My script checks whois.crsnic.net which should refer to each individual registrars whois server, and if it can't connect to crsnic for whatever reason, it connects to internic instead. Same code though essentially. __________________ Whois Searches :: Bid for Position Link Bidders :: Poker Tactics D1.ORG.UK :: Ad Auctions

05-23-2007, 10:42 AM	#4 (permalink)
champ_rock Senior Member Join Date: Oct 2006 Location: http://akshayjain.org Posts: 2,768 8,037.05 NP$ (Donate)	please tell me which one of the two should i use ? which is better? __________________ Akshay Jain ......................

05-27-2007, 06:29 AM	#5 (permalink)
champ_rock Senior Member Join Date: Oct 2006 Location: http://akshayjain.org Posts: 2,768 8,037.05 NP$ (Donate)	i used the code and it worked perfectly can u please explain some things to me that i fail to grasp: 1. why are we using Code: $info .= fgets($sock,128); doesn't is mean $info=fgets($sock,128) . $info ? what is the use of Concatenate here? 2. what is 128 in the fget()? thanks __________________ Akshay Jain ......................

05-27-2007, 07:07 AM	#6 (permalink)
tristanperry Senior Member Join Date: Jan 2007 Location: Wales - United Kingdom Posts: 1,328 357.00 NP$ (Donate)	1) The concatenate is used to add the string (fgets($sock,128) to the $info variable (i.e. because then, after the loop's complete, "echo $info" can be used in one go to echo everything). But yes, "$info=fgets($sock,128) . $info" should also do the same thing. 2) The 128 is the maximum length of what's returned by the results __________________ █ Devoted Hosting █ High Quality Shared And Reseller Hosting █ cPanel, 24/7 support, 99.9% uptime guaranteed

05-27-2007, 08:51 AM	#7 (permalink)
Peter Senior Member Join Date: Nov 2003 Location: Scotland Posts: 4,900 0.60 NP$ (Donate)	Yes as tristanperry stated the 128 is the amount of bytes to read at a time. The reason we specify it as the PHP manual specifies that it is more resource efficient to do so (http://php.net/fgets) Regarding the $info .= fgets($sock,128); line it achieves exactly the same as what you wrote but is just another way of doing it.

05-27-2007, 10:10 AM	#8 (permalink)
champ_rock Senior Member Join Date: Oct 2006 Location: http://akshayjain.org Posts: 2,768 8,037.05 NP$ (Donate)	thanks guys.. but there seems to be a problem with bulk whois checkups. does any body know how to successfuly conduct checks? thanks __________________ Akshay Jain ......................

05-27-2007, 10:36 AM	#10 (permalink)
champ_rock Senior Member Join Date: Oct 2006 Location: http://akshayjain.org Posts: 2,768 8,037.05 NP$ (Donate)	lol email harvesting.. i thought that whois queries were generally used for checking doamin availabilities thanks.. i will use the sleep() function __________________ Akshay Jain ......................

05-27-2007, 02:56 PM	#11 (permalink)
Peter Senior Member Join Date: Nov 2003 Location: Scotland Posts: 4,900 0.60 NP$ (Donate)	Some spammers use whois results to harvest email accounts as stated by maximum. Another method than using usleep etc is by using more than 1 whois server and alternate between which ones you use.

05-27-2007, 09:30 PM	#12 (permalink)
champ_rock Senior Member Join Date: Oct 2006 Location: http://akshayjain.org Posts: 2,768 8,037.05 NP$ (Donate)	i guess the 2 whois servers for querying .com and .net names are crsnic and internic right? __________________ Akshay Jain ......................

05-28-2007, 06:56 AM	#13 (permalink)
maximum If only you knew... Join Date: Oct 2005 Location: Inside your head... Posts: 919 128.65 NP$ (Donate)	whois.verisign-grs.net

05-30-2007, 12:37 PM	#14 (permalink)
samuofm New Member Join Date: Mar 2007 Posts: 16 0.00 NP$ (Donate)	thanks to this thread I wrote a simple scanner last night, it alternates between 3 whois servers.

06-01-2007, 07:29 AM	#18 (permalink)
Barrucadu Barru. Join Date: Aug 2005 Location: East Yorkshire, England Posts: 2,731 78.50 NP$ (Donate)	That means that the whois servers are denying your connection requests. Or, a part of the network between your server and the whois server is down. __________________ Website \| Blog \| Uzbl (my branch) 9thSeptember2009.com

06-01-2007, 08:27 AM	#19 (permalink)
champ_rock Senior Member Join Date: Oct 2006 Location: http://akshayjain.org Posts: 2,768 8,037.05 NP$ (Donate)	ya it is denying my requests. this is happening after i check about 10-12 domains if anyone finds a solution to this then it would be great __________________ Akshay Jain ......................

06-01-2007, 12:44 PM	#20 (permalink)
monaco NamePros Regular Join Date: Jul 2005 Location: Tucson, AZ Posts: 695 314.80 NP$ (Donate)	What I'd like to know is how you get around the issue of some registrar's not listing complete info in their whois registries and forcing you to use a web interface with a captcha to get the information. __________________ My Website \| My Blog

06-02-2007, 05:40 PM	#22 (permalink)
rocko78 NamePros Regular Join Date: Oct 2006 Posts: 350 921.65 NP$ (Donate)	Thanks for this tool! Can anybody just tell how to get the available or not status? I mean if the domain is available show XXXX and if not show "YYYY" Thanks! __________________ Recetas de Cocina (In Spanish) \| Perros Pastor Aleman (In Spanish) \| Where is my sign???

06-02-2007, 10:25 PM	#24 (permalink)
zoki NamePros Regular Join Date: Mar 2007 Posts: 888 222.43 NP$ (Donate)	are you running that on your local server ? or on real hosting ? Maybe if its on real hosting (exp. GoDaddy) there are more whois lookups from other machines / ppls trying to register domains etc. __________________ Patience is your best friend in this business! (© by Gene)

06-02-2007, 10:49 PM	#25 (permalink)
champ_rock Senior Member Join Date: Oct 2006 Location: http://akshayjain.org Posts: 2,768 8,037.05 NP$ (Donate)	it is on a shared hosting. the servers are at "LayeredTech" i think that might be the case. i will try to switch my hosting for this purpose. may be it will work then __________________ Akshay Jain ......................

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)