สอบถามท่านผู้รู้ ทำมัยผมใช้คำสั่ง curl แล้วไม่มีอะไรเกิดขึ้น

	$url = "https://xxxxxxx.com/login";
	$username = "xxxx";
	$password = "xxxx";
	
	$csrf_token_name = "_csrf";
	$params = array(
					"language" => "th&",
					"redirect" => "&",
					"username" => $username."&",
					"password" => $password,
					);
					
	$token_cookie= realpath("test.txt");

	$ch = curl_init();
	curl_setopt($ch, CURLOPT_URL, $url);
	curl_setopt($ch, CURLOPT_USERAGENT,'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/32.0.1700.107 Chrome/32.0.1700.107 Safari/537.36');
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
	curl_setopt($ch, CURLOPT_COOKIEJAR, $token_cookie);
	curl_setopt($ch, CURLOPT_COOKIEFILE, $token_cookie);
	curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
	curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
	$response = curl_exec($ch);
	
	/* print_r($response); */
	
	if (curl_errno($ch)) die(curl_error($ch));
	libxml_use_internal_errors(true);
	$dom = new DomDocument();
	$dom->loadHTML($response);
	libxml_use_internal_errors(false);
	$tokens = $dom->getElementsByTagName("input");
	for ($i = 0; $i < $tokens->length; $i++) 
	{
		$meta = $tokens->item($i);
		if($meta->getAttribute('name') == '_csrf')
			$t = $meta->getAttribute('value');
	}
	if($t) {
		$csrf_token = file_get_contents(realpath("another-cookie.txt"));
		$info = "";
		foreach($params as $param_key => $param_value) 
		{
			$info .= $param_key ."=". $param_value;	
		}
		$postinfo = $csrf_token_name."=".$t."&".$info;
		
		$headers = array();
		
		$header[0] = "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9";
		$header[] = "accept-encoding: gzip, deflate, br";
		$header[] = "accept-language: en-US,en;q=0.9";
		$header[] = "cache-control: max-age=0";
		$header[] = "content-length: 100";
		$header[] = "content-type: application/x-www-form-urlencoded";
		$headers[] = "X-CSRF-Token: $t";
		$headers[] = "Cookie: $token_cookie";
		$headers[] = "origin: https://xxx.com";
		$headers[] = "referer: https://xxx.com/login";
		$headers[] = "sec-fetch-mode: navigate";
		$headers[] = "sec-fetch-site: same-origin";
		$headers[] = "sec-fetch-user: ?1";
		$headers[] = "upgrade-insecure-requests: 1";


		curl_setopt($ch, CURLOPT_URL, $url);
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.0 Safari/537.36");
		curl_setopt($ch, CURLOPT_COOKIEJAR, $token_cookie);
		curl_setopt($ch, CURLOPT_COOKIEFILE, $token_cookie);
		curl_setopt($ch, CURLOPT_POST, true);
		curl_setopt($ch, CURLOPT_POSTFIELDS, $postinfo);
		curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
		curl_setopt($ch, CURLOPT_REFERER, $url);
		curl_setopt($ch, CURLOPT_ENCODING, "gzip,deflate");
		curl_setopt($ch, CURLOPT_AUTOREFERER, true);
		curl_setopt($ch, CURLOPT_TIMEOUT, 260);
		curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
		curl_setopt($ch, CURLOPT_VERBOSE, true);
		
		ob_start();
		$html = curl_exec($ch);
		$result = curl_getinfo($ch);
		ob_get_clean();
		
		echo "<pre>";
		print_r($result);
		echo "</pre>";
		print($html);
		
		if (curl_errno($ch)) print curl_error($ch);
		curl_close($ch); 
	}