{"id":110979,"date":"2025-03-19T07:00:00","date_gmt":"2025-03-19T14:00:00","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/oldnewthing\/?p=110979"},"modified":"2025-03-19T08:20:37","modified_gmt":"2025-03-19T15:20:37","slug":"20250319-00","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/oldnewthing\/20250319-00\/?p=110979","title":{"rendered":"You can’t simulate keyboard input with PostMessage, revisited"},"content":{"rendered":"

A customer was trying to manipulate another program, so they tried posting messages to it. They found that input didn’t work reliably because the program had its own WH_KEYBOARD<\/code> hook, and the posted messages weren’t triggering the hook, so the program saw input come in the message queue with no corresponding WH_KEYBOARD<\/code> hook, and things got out of sync and didn’t work right. What’s going on?<\/p>\n

What’s going on is that you can’t simulate keyboard input with PostMessage<\/a>. Posting input messages is like prank calling the program. “Hello, this is (giggle) the input system? Yeah, and um (covers handset, whispers<\/i> what should I say? back into handset<\/i>), yeah the user hit the um, the Enter key? When? Um, like (other person whispers in their ear) 5 seconds ago? Yeah, okay, so like Enter key, got it? Cool, thanks.” How successful this is depends on how much the program allows itself to be fooled.<\/p>\n

In this case, the program was correlating the input messages with information from another channel (the WH_KEYBOARD<\/code> hook), and only keyboard input goes through the WH_KEYBOARD<\/code> hook, because it is when a message is fetched from the input queue that the WH_KEYBOARD<\/code> hook is called. Posted messages masquerading as keyboard input don’t come from the input queue; they come from the posted message queue. And the code that pulls messages from the posted message queue doesn’t call the WH_KEYBOARD<\/code> hook.<\/p>\n

As usual, the typical\u00b9 answers are either to use UI Automation to drive the target program, or if the target program’s support for UI Automation is insufficient, you can use Send\u00adInput<\/code> to generate synthetic input. Synthetic input is treated like real input, and it goes through the input system like hardware input.\u00b9<\/p>\n

\u00b9 An atypical answer is to use the target program’s object model if it offers one. For example, Microsoft Word lets you manipulate the application and its active document through its Application object<\/a>.<\/p>\n

\u00b2 Synthetic input can still be detected, for example, by looking for the LLKHF_INJECTED<\/code> flag in the KBDLLHOOKSTRUCT<\/code>‘s flags.<\/p>\n","protected":false},"excerpt":{"rendered":"

If it didn’t go through the input system, it only looks like input as much as the app allows itself to be fooled.<\/p>\n","protected":false},"author":1069,"featured_media":111744,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[25],"class_list":["post-110979","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-oldnewthing","tag-code"],"acf":[],"blog_post_summary":"

If it didn’t go through the input system, it only looks like input as much as the app allows itself to be fooled.<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts\/110979","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/users\/1069"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/comments?post=110979"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts\/110979\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/media\/111744"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/media?parent=110979"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/categories?post=110979"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/tags?post=110979"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}