Comments on: 13-Line Shell Script Votes for Mr. Splashy Pants 100s of Times

By: Eco-Geekery » Post Topic » What nearly killed Mister Splashy Pants…

Mon, 03 Dec 2007 12:13:40 +0000

[...] Web Apps responded to the call to vote for Mister Splashy Pants with a 13 Line Shell Script which (they thought) was voting for MSP 100s of times. Sorry, guys, we’re tree huggers, not [...]

By: One Line Mr. Splashy Pants Script (Ruby) | On Web Apps

One Line Mr. Splashy Pants Script (Ruby) | On Web Apps — Wed, 28 Nov 2007 09:40:27 +0000

[...] Projects « 13-Line Shell Script Votes for Mr. Splashy Pants 100s of Times [...]

By: Colas Nahaboo

Colas Nahaboo — Wed, 28 Nov 2007 09:32:44 +0000

Oops, sorry didnt pay attention enough, of course modern browsers(*) should not be able to be tricked to do a POST (so my hack wont work). I was thinking of a real case that happened some years ago where a local startup set up an “affiliate” scheme where having people “click” on sponsored links (via a GET…) earned real money. They quickly backed off

(*) I sincerely hope the things like http://timjoh.com/javascript-post-variables-to-forms/
do not work anymore in modern browsers… or at least are checked to work only inside the same domain

By: Shanti Braford

Shanti Braford — Wed, 28 Nov 2007 09:00:35 +0000

Hey Colas,

Yes, these would create http GET requests to the specified image URLs.

But can you trick a web browser into doing an HTTP POST for you? =)

Now that would be cool (and evil)!

By: Colas Nahaboo

Colas Nahaboo — Wed, 28 Nov 2007 08:13:12 +0000

You know, you can even have people around the world “click” for you at random intervals and with their own (different) IPs…

Just create an IMG tag with a SRC= to the url-to-click, and put this HTML link into a visited web site (yours, or one allowing user-contributed html)