JavaScript — Говнокод.ру

JavaScript / Говнокод #6132

+164

1

$('#menu_block').each…

Дальше не смотрел.

stuffort, 30 Марта 2011

Комментарии (7)

JavaScript / Говнокод #6131

+158

01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20

if (location.href.split('/')[4] == '14-0-0' | location.href.split('/')[4] == '14') {
	$('#u1').attr({
		class: 'tabv'
	})
}
else if (location.href.split('/')[4] == '14-0-1') {
	$('#u2').attr({
		class: 'tabv'
	})
}
else if (location.href.split('/')[4] == '14-0-0-1' || $('#PMtoUser').val()) {
	$('#bar').hide();
	$('#mess').css({
		backgroundColor: '#fafafa'
	});;
	$('#mess').html('<div style="padding-top:30px;padding-bottom:30px;"><div id="valError2"></div><div id="valSuccess2"></div><div id="bmess"><div id="bmess2"><table width="100%"><tr><td align="left" valign="top"><div class="avaogets" style="margin-top:2px;"><img src='+noavatar+'></div></td><td width="100%" style="padding-left:15px;" align="left" valign="top"><div id="hname">Получатель</div><input type="text" id="nameSend"><div style="padding-top:9px;" id="hname">Тема</div><input type="text" id="tSend"></td></tr></table><textarea style="margin-top:10px;" id="message2"></textarea><div id="idCap" style="overflow:hidden;margin-top:3px;margin-left:1px;"><div style="float:left;" id="abbbb"></div><div style="float:right;"><input id="capval" maxlength="4" type="text"></div></div><div id="new_b" class="Mbd" style="margin-top:6px;" onclick="$(\'#sbm\').click()"><div id="new_b2">Отправить</div></div><div class="spanload" style="display:inline-block;padding-left:5px;"></div></div> </div></div>');
	$('#u4').attr({
		class: 'tabv'
	})
}

Это и многое другое на http://uweb.su/js/new_message.js!
Смотрите в браузерах вашего компьютера!

UnderShot, 30 Марта 2011

Комментарии (8)

JavaScript / Говнокод #6124

+160

1
2
3
4
5
6

var begin_h = html.indexOf("<h1 class=\"header\">");
var end_h = html.indexOf("</h1>");
var data = "";
if (begin_h != -1 && end_h != -1) {
  data = html.substr(begin_h, end_h + 5); //5 - это длина тега </h1>, чтобы его тоже захватило
}

Прелесть, найденная на гугл-ответах. Человек пишет расширение для Firefox.

Vindicar, 29 Марта 2011

Комментарии (15)

JavaScript / Говнокод #6121

+165

01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

<script>

var IllegalChars=new Array("select", "drop", ";", "--", "insert", "delete", "xp_", "update", "/", ":", "char(", "?", "`", "|", "declare", "convert", "cast(", "@@", "varchar", "2D2D", "4040", "00400040", "[", "]");
var IllegalFound=new Array();
var IllegalCharsCount=0;

function ResetCharsCount()
{
 IllegalCharsCount=0;
}

function wordFilter(form,fields)
{
	ResetCharsCount();
	var CheckTextInput;
	var fieldErrArr=new Array();
	var fieldErrIndex=0;
	for(var i=0; i<fields.length; i++)
	{
		CheckTextInput = document.forms[form].elements[fields[i]].value;
		for(var j=0; j<IllegalChars.length; j++)
		{
			for(var k=0; k<(CheckTextInput.length); k++)
			{
				if(IllegalChars[j]==CheckTextInput.substring(k,(k+IllegalChars[j].length)).toLowerCase())
				{
					IllegalFound[IllegalCharsCount]=CheckTextInput.substring(k,(k+IllegalChars[j].length));
					IllegalCharsCount++;
					fieldErrArr[fieldErrIndex]=i;
					fieldErrIndex++;
				}
			}
		}
	}
	var alert_text="";
	for(var k=1; k<=IllegalCharsCount; k++)
	{
		alert_text+="\n" + "(" + k + ")  " + IllegalFound[k-1];
		eval('CheckTextInput=document.' + form + '.' + fields[fieldErrArr[0]] + '.select();');
	}
	if(IllegalCharsCount>0)
	{
		alert("The form cannot be submitted.\nThe following errors were found:\n_______________________________\n" + alert_text + "\n_______________________________\n");
		return false;
	}
	else
	{
		return true;
		document.forms[form].submit();
	}
}
</script>

...

<FORM NAME="FormHome" ACTION="search.asp" METHOD="post" onSubmit="return wordFilter('FormHome',['criteria']);">

http://www.cadw.wales.gov.uk/

Инъекция не пройдет.

pingw33n, 29 Марта 2011

Комментарии (9)

JavaScript / Говнокод #6096

+190

1
2
3
4
5

// Count how many rows are in the table.
    for (var x = 0; x < tableRows.length; ++x)
    {
    	rowCount += 1;
    }

napmor1, 26 Марта 2011

Комментарии (5)

JavaScript / Говнокод #6079

+171

01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

inExp = function (dig, exp) {
02.if (exp == 1) return alert(dig);
03.if (exp == 2) return alert(dig*dig);
04.if (exp == 3) return alert(dig*dig*dig);
05.if (exp == 4) return alert(dig*dig*dig*dig);
06.if (exp == 5) return alert(dig*dig*dig*dig*dig);
07.if (exp == 6) return alert(dig*dig*dig*dig*dig*dig);
08.if (exp == 7) return alert(dig*dig*dig*dig*dig*dig*dig);
09.if (exp == 8 ) return alert(dig*dig*dig*dig*dig*dig*dig*dig);
10.if (exp == 9) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig);
11.if (exp == 10) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
12.if (exp == 11) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
13.if (exp == 12) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
14.if (exp == 13) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
15.if (exp == 14) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
16.if (exp == 15) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
17.if (exp == 16) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
18.if (exp == 17) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
19.if (exp == 18) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
20.if (exp == 19) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
21.if (exp == 20) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
22.if (exp == 21) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
23.if (exp == 22) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
24.if (exp == 23) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
25.if (exp == 24) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
26.if (exp == 25) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
27.if (exp == 26) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
28.if (exp == 27) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
29.if (exp == 28) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
30.if (exp == 29) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
31.if (exp == 30) return alert(dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig*dig);
32.}

Боян не? попалось на глаза в блоге каком-то случайно

vitaly, 24 Марта 2011

Комментарии (27)

JavaScript / Говнокод #6059

+160

1
2
3
4
5
6

Math.round = function(number, precision)
{
	precision = Math.abs(parseInt(precision)) || 0;
	var coefficient = Math.pow(10, precision);
	return Math._round(number*coefficient)/coefficient;
}

bugmenot, 22 Марта 2011

Комментарии (6)

JavaScript / Говнокод #6044

+160

1
2
3
4
5
6
7
8

if ( (CheckDEADcall > 0) && (VD_live_customer_call==1) )
					{
					if (CheckDEADcallON < 1)
					{
					if( document.images ) { document.images['livecall'].src = image_livecall_DEAD.src;}
						CheckDEADcallON=1;
					}
					}

Оттуда же.

7ion, 20 Марта 2011

Комментарии (2)

JavaScript / Говнокод #6041

+161

01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

else
		{
		fronter = user;
		LasTCID			= MDnextResponse_array[0];
		document.vicidial_form.lead_id.value			= MDnextResponse_array[1];
		LeaDPreVDispO	= MDnextResponse_array[2];
		document.vicidial_form.vendor_lead_code.value	= MDnextResponse_array[4];
		document.vicidial_form.list_id.value			= MDnextResponse_array[5];
		document.vicidial_form.gmt_offset_now.value		= MDnextResponse_array[6];
		document.vicidial_form.phone_code.value			= MDnextResponse_array[7];
		if ( (disable_alter_custphone=='Y') || (disable_alter_custphone=='HIDE') )
			{
			var tmp_pn = document.getElementById("phone_numberDISP");
			if (disable_alter_custphone=='Y')
{
tmp_pn.innerHTML		= MDnextResponse_array[8];
}
			}
		document.vicidial_form.phone_number.value		= MDnextResponse_array[8];
		document.vicidial_form.title.value= MDnextResponse_array[9];
		document.vicidial_form.first_name.value			= MDnextResponse_array[10];
		document.vicidial_form.middle_initial.value		= MDnextResponse_array[11];
		document.vicidial_form.last_name.value			= MDnextResponse_array[12];
		document.vicidial_form.address1.value			= MDnextResponse_array[13];
		document.vicidial_form.address2.value			= MDnextResponse_array[14];
		document.vicidial_form.address3.value			= MDnextResponse_array[15];
		document.vicidial_form.city.value= MDnextResponse_array[16];
		document.vicidial_form.state.value= MDnextResponse_array[17];
		document.vicidial_form.province.value			= MDnextResponse_array[18];
		document.vicidial_form.postal_code.value		= MDnextResponse_array[19];
		document.vicidial_form.country_code.value		= MDnextResponse_array[20];
		document.vicidial_form.gender.value= MDnextResponse_array[21];
		document.vicidial_form.date_of_birth.value		= MDnextResponse_array[22];
		document.vicidial_form.alt_phone.value			= MDnextResponse_array[23];
		document.vicidial_form.email.value= MDnextResponse_array[24];
		document.vicidial_form.security_phrase.value	= MDnextResponse_array[25];
		var REGcommentsNL = new RegExp("!N","g");
		MDnextResponse_array[26] = MDnextResponse_array[26].replace(REGcommentsNL, "\n");
		document.vicidial_form.comments.value			= MDnextResponse_array[26];
		document.vicidial_form.called_count.value		= MDnextResponse_array[27];
		previous_called_count			= MDnextResponse_array[27];
		previous_dispo	= MDnextResponse_array[2];
		CBentry_time	= MDnextResponse_array[28];
		CBcallback_time	= MDnextResponse_array[29];
		CBuser			= MDnextResponse_array[30];
		CBcomments		= MDnextResponse_array[31];
		dialed_number	= MDnextResponse_array[32];
		dialed_label	= MDnextResponse_array[33];
		source_id		= MDnextResponse_array[34];
		document.vicidial_form.rank.value= MDnextResponse_array[35];
		document.vicidial_form.owner.value= MDnextResponse_array[36];
	//	CalL_ScripT_id	= MDnextResponse_array[37];
		script_recording_delay			= MDnextResponse_array[38];
		CalL_XC_a_NuMber= MDnextResponse_array[39];
		CalL_XC_b_NuMber= MDnextResponse_array[40];
		CalL_XC_c_NuMber= MDnextResponse_array[41];
		CalL_XC_d_NuMber= MDnextResponse_array[42];
		CalL_XC_e_NuMber= MDnextResponse_array[43];

		timer_action = campaign_timer_action;
		timer_action_message = campaign_timer_action_message;
		timer_action_seconds = campaign_timer_action_seconds;
			
		lead_dial_number = document.vicidial_form.phone_number.value;
		var dispnum = document.vicidial_form.phone_number.value;
		var status_display_number = phone_number_format(dispnum);

7ion, 20 Марта 2011

Комментарии (2)

JavaScript / Говнокод #6040

+164

01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79

if (VDIC_web_form_address.match(regWFAcustom))
	{
	URLDecode(VDIC_web_form_address,'YES');
	TEMP_VDIC_web_form_address = decoded;
	TEMP_VDIC_web_form_address = TEMP_VDIC_web_form_address.replace(regWFAcustom, '');
	}
else
	{
	web_form_vars = 
	"&lead_id=" + document.vicidial_form.lead_id.value + 
	"&vendor_id=" + document.vicidial_form.vendor_lead_code.value + 
	"&list_id=" + document.vicidial_form.list_id.value + 
	"&gmt_offset_now=" + document.vicidial_form.gmt_offset_now.value + 
	"&phone_code=" + document.vicidial_form.phone_code.value + 
	"&phone_number=" + document.vicidial_form.phone_number.value + 
	"&title=" + document.vicidial_form.title.value + 
	"&first_name=" + document.vicidial_form.first_name.value + 
	"&middle_initial=" + document.vicidial_form.middle_initial.value + 
	"&last_name=" + document.vicidial_form.last_name.value + 
	"&address1=" + document.vicidial_form.address1.value + 
	"&address2=" + document.vicidial_form.address2.value + 
	"&address3=" + document.vicidial_form.address3.value + 
	"&city=" + document.vicidial_form.city.value + 
	"&state=" + document.vicidial_form.state.value + 
	"&province=" + document.vicidial_form.province.value + 
	"&postal_code=" + document.vicidial_form.postal_code.value + 
	"&country_code=" + document.vicidial_form.country_code.value + 
	"&gender=" + document.vicidial_form.gender.value + 
	"&date_of_birth=" + document.vicidial_form.date_of_birth.value + 
	"&alt_phone=" + document.vicidial_form.alt_phone.value + 
	"&email=" + document.vicidial_form.email.value + 
	"&security_phrase=" + document.vicidial_form.security_phrase.value + 
	"&comments=" + document.vicidial_form.comments.value + 
	"&user=" + user + 
	"&pass=" + pass + 
	"&campaign=" + campaign +
	"&phone_login=" + phone_login + 
	"&original_phone_login=" + original_phone_login +
	"&phone_pass=" + phone_pass + 
	"&fronter=" + fronter + 
	"&closer=" + user + 
	"&group=" + group + 
	"&channel_group=" + group + 
	"&SQLdate=" + SQLdate + 
	"&epoch=" + UnixTime + 
	"&uniqueid=" + document.vicidial_form.uniqueid.value + 
	"&customer_zap_channel=" + lastcustchannel + 
	"&customer_server_ip=" + lastcustserverip +
	"&server_ip=" + server_ip + 
// ...еще строчек 30...
	"&user_custom_five=" + VU_custom_five + '' +
	"&preset_number_a=" + CalL_XC_a_NuMber + '' +
	"&preset_number_b=" + CalL_XC_b_NuMber + '' +
	"&preset_number_c=" + CalL_XC_c_NuMber + '' +
	"&preset_number_d=" + CalL_XC_d_NuMber + '' +
	"&preset_number_e=" + CalL_XC_e_NuMber + '' +
	"&preset_dtmf_a=" + CalL_XC_a_Dtmf + '' +
	"&preset_dtmf_b=" + CalL_XC_b_Dtmf + '' +
	webform_session;
	
	var regWFspace = new RegExp(" ","ig");
	web_form_vars = web_form_vars.replace(regWF, '');
	var regWF = new RegExp("\\`|\\~|\\:|\\;|\\#|\\'|\\\"|\\{|\\}|\\(|\\)|\\*|\\^|\\%|\\$|\\!|\\%|\\r|\\t|\\n","ig");
	web_form_vars = web_form_vars.replace(regWFspace, '+');
	web_form_vars = web_form_vars.replace(regWF, '');

	var regWFAvars = new RegExp("\\?","ig");
	if (VDIC_web_form_address.match(regWFAvars))
		{web_form_vars = '&' + web_form_vars}
	else
		{web_form_vars = '?' + web_form_vars}

	TEMP_VDIC_web_form_address = VDIC_web_form_address + "" + web_form_vars;

	var regWFAqavars = new RegExp("\\?&","ig");
	var regWFAaavars = new RegExp("&&","ig");
	TEMP_VDIC_web_form_address = TEMP_VDIC_web_form_address.replace(regWFAqavars, '?');
	TEMP_VDIC_web_form_address = TEMP_VDIC_web_form_address.replace(regWFAaavars, '&');
	}

7ion, 20 Марта 2011

Комментарии (1)

Говнокод: по колено в коде.

JavaScript / Говнокод #6132

JavaScript / Говнокод #6131

JavaScript / Говнокод #6124

JavaScript / Говнокод #6121

JavaScript / Говнокод #6096

JavaScript / Говнокод #6079

JavaScript / Говнокод #6059

JavaScript / Говнокод #6044

JavaScript / Говнокод #6041

JavaScript / Говнокод #6040