https://twitter.com/oauth/authenticate?oauth_token=mavXM2HkYQSm63Uag10Re969X1g63vAcvS9BGcmEU

<?php
session_start();
require_once('twitter/twitteroauth.php');
require_once('twitter/twitterclassic.php');
require_once('viraltweets.php');

//Did You Come From Twitter OAuth?
if(isset($_REQUEST['oauth_token'])):

    //Twitter OAuth Tweet and Follow
    if (isset($_REQUEST['oauth_token']) && $_SESSION['oauth_token'] !== $_REQUEST['oauth_token']) {
      $_SESSION['oauth_status'] = 'oldtoken';
      //header('Location: ./clearsessions.php');
      echo "fail";
    }
   
    /* Create TwitteroAuth object with app key/secret and token key/secret from default phase */
    $connection = new TwitterOAuth($user['twitter_consumer_key'], $user['twitter_consumer_secret'], $_SESSION['oauth_token'], $_SESSION['oauth_token_secret']);
   
    /* Request access tokens from twitter */
    $access_token = $connection->getAccessToken($_REQUEST['oauth_verifier']);
   
    /* Save the access tokens. Normally these would be saved in a database for future use. */
    $_SESSION['access_token'] = $access_token;
   
    /* Remove no longer needed request tokens */
    unset($_SESSION['oauth_token']);
    unset($_SESSION['oauth_token_secret']);
   
    /* If HTTP response is 200 continue otherwise send to connect page to retry */
    if (200 == $connection->http_code) :
        /* The user has been verified and the access tokens can be saved for future use */
        $_SESSION['status'] = 'verified';
        //header('Location: ./index.php');
     
        /* Get user access tokens out of the session. */
        $access_token = $_SESSION['access_token'];
       
        /* Create a TwitterOauth object with consumer/user tokens. */
        $connection = new TwitterOAuth($user['twitter_consumer_key'], $user['twitter_consumer_secret'], $access_token['oauth_token'], $access_token['oauth_token_secret']);
       
        /* If method is set change API call made. Test is called by default. */
        $content = $connection->get('account/verify_credentials');
       
        /* Some example calls */
        $connection->post('https://twitter.com/statuses/update.xml', array('status' => $_SESSION['twitter_message']));
       
        if(isset($_SESSION['tid_array']) && is_array($_SESSION['tid_array'])) {
            foreach($_SESSION['tid_array'] as $arr) {
                $connection->post('http://twitter.com/friendships/create.xml', array('screen_name'=>$arr));
            }
        }
       
          /* All done, Now What */
        if(isset($_SESSION['email_destination'])) {
            header("Location: email.php");
        }

        header("Location: ". $_SESSION['twitter_redirect']);   
       
    endif;   

else:

    //Get Twitter RT Message
    $twitter_message = $_POST['twitter_message'];
   
    //Get Twitter Follow List (Session Array)
    $follow_names = $_POST['twitter_autofollow']; //array("kylegraham");
    $redirect = $_POST['twitter_redirect'];
   
    //print_r($_POST);
    //Twitter Classic API
    if(isset($_POST['twitter_username']) && isset($_POST['twitter_password'])) :
        //tweet
        $twitter_message = $_POST['twitter_message']; $msg = str_replace("\'","'",$twitter_message);
        $username = $_POST['twitter_username'];
        $password = $_POST['twitter_password'];
        if($msg!="" && $username!="" && $password!="" && $redirect!="") {   
            $doupdate = updateTwitter($username,$password,$msg);
            if($doupdate) {
                //update tweet stats
                $id = $_POST['campaign_id']; $type = "tweets";
                include("updatestats.php");
                if(isset($_GET['ajax'])) {
                    //what to write if request was an AJAX request
                    echo "success";
                } else {
                    header( "Location: $redirect");
                }
            } else {
                //showError();
                echo $doupdate;
            }
        } else {
            showError();
        }
               
        //follow
       
        //echo followUsers($username,$password,$follow_name);
       
        if(is_array($follow_names)) :
            followUsers($username,$password,$follow_names);
        endif;
               
       
    //Twitter OAuth
    else:
       
        /* Create TwitterOAuth object and get request token */
        $connection = new TwitterOAuth($user['twitter_consumer_key'], $user['twitter_consumer_secret']);
        /* Get request token */
        $callback = "http://".$_SERVER['HTTP_HOST'].$_SERVER['SCRIPT_NAME'];
        $request_token = $connection->getRequestToken($callback);
       
        /* Save request token to session */
        $_SESSION['oauth_token'] = $token = $request_token['oauth_token'];
        $_SESSION['oauth_token_secret'] = $request_token['oauth_token_secret'];
        $_SESSION['ajax'] = $_GET['ajax'];
        $_SESSION['tid_array'] = $follow_names;
        $_SESSION['twitter_message'] = $twitter_message;
        $_SESSION['twitter_redirect'] = $redirect;
        $_SESSION['email_destination'] = $_GET['action'];
        $_SESSION['post_array'] = $_POST;
        //print_r($user);
        /* If last connection fails don't display authorization link */
        if($connection->http_code==200) {
            $url = $connection->getAuthorizeURL($token);
            header('Location: ' . $url);
            echo "should be at $url";
        } else {
            echo $connection->http_code;
            print_r($request_token);
        }
       
    endif;
endif;

//redirect to destination
header("Location: ". $_POST['redirect_url']);
?>