Databases
StackOverflow2013
Postsdbo
POPrevent javascript hack script from executing
Body
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POPrevent javascript hack script from executing
    text
    copied!<p>I have a registration form to sign up which works fine. As part of abuse / bot prevention the registration page will show an antiscript check if you attempt to sign up another account from the same IP address within 3 hours of the last.</p> <p>However I have managed to get hold of a script which is managing to get round this check. The script can be run with a macro extension to firefox on Windows. It uses the email.txt as a source for email addresses.</p> <pre><code>email="email.txt" akun=new Array() ID=new Array() for(ns=1;ns&lt;=2000;ns++){ iimPlay("CODE:" +"\n"+"CMDLINE !DATASOURCE "+email +"\n"+"SET !DATASOURCE_COLUMNS 1" +"\n"+"SET !LOOP "+(ns) +"\n"+"SET !EXTRACT {{!COL1}}") akun[ns]=iimGetLastExtract();if(akun[ns]==""||akun[ns]=="undefined"||akun[ns]=="#eanf#") {break} ID[ns]=akun[ns].replace("@yahoo.com","") i=iimPlay("CODE:" +"\n"+"URL GOTO=http://www.website.com/signup" +"\n"+"TAG POS=1 TYPE=INPUT:TEXT FORM=NAME:NoFormName ATTR=NAME:email CONTENT="+akun[ns] +"\n"+"TAG POS=1 TYPE=INPUT:TEXT FORM=NAME:NoFormName ATTR=NAME:confirm CONTENT="+akun[ns] +"\n"+"TAG POS=1 TYPE=INPUT:TEXT FORM=NAME:NoFormName ATTR=NAME:username CONTENT="+ID[ns] +"\n"+"SET !ENCRYPTION NO" +"\n"+"TAG POS=1 TYPE=INPUT:PASSWORD FORM=NAME:NoFormName ATTR=NAME:password CONTENT=satan1234" +"\n"+"TAG POS=1 TYPE=INPUT:PASSWORD FORM=NAME:NoFormName ATTR=NAME:confirm_password CONTENT=satan1234" +"\n"+"TAG POS=1 TYPE=INPUT:TEXT FORM=NAME:NoFormName ATTR=NAME:referral CONTENT=52799" +"\n"+"TAG POS=1 TYPE=INPUT:CHECKBOX FORM=NAME:NoFormName ATTR=NAME:tos CONTENT=YES" +"\n"+"pause" +"\n"+"TAG POS=1 TYPE=INPUT:SUBMIT FORM=ID:street-register ATTR=NAME:register&amp;&amp;VALUE:Play&lt;SP&gt;For&lt;SP&gt;Free&lt;SP&gt;→" +"\n"+"TAG POS=1 TYPE=A ATTR=TXT:Logout" ) if(i!=1){break}; iimDisplay (ns) } </code></pre> <p>Can anyone give a heads up as to how I can stop this script from working endlessly?</p> <p>Thanks </p>
 

Querying!

 
Guidance
An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload