那么，唯一的不同了，你可以不假的请求的IP地址。根据多么艰难的保护是销售人员正在使用，您可能无法从一个单独的IP地址欺骗（它会检测并拒绝该请求）。

Well, the only thing that's different that you can't fake is the IP address of the request. Depending on how tough the protection is that salesforce is using, you may not be able to spoof from a separate IP address (it would detect and deny the request).

其他的一切应该是100％fakeable（头，等等）。我的建议是，你得到萤火虫或TamperData，并期待在原始的头被发送到Salesforce从您的浏览器正常。然后复制从PHP，准确的要求。如果你需要其他的信息，你可以检测到它的JS和它传递给PHP（Cookie信息，浏览信息等）...

Everything else should be 100% fakeable (headers, etc). What I would suggest is that you get firebug or TamperData and look at the raw headers being sent to salesforce from your browser normally. Then replicate that exact request from PHP. If you need other information, you could detect it in JS and pass it to PHP (Cookie information, browser info, etc)...