I'm willing to buy this script... anyone?

[|BlackMarket|]

EDIT:
bzy39, Crazy, CharlesNCharge and Grizzy!

Thanks for your participation, feedback and information for my earlier puzzle.
Anyway this have been resolved with the help if Grizzy!

Thanks buddy!

I'm deleting this and the solution.
WHY? Just to stay under the radar...Well we still need to feed our family right

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Mauris diam enim, auctor pharetra scelerisque non, faucibus at justo. Donec tincidunt consectetur enim sed sodales. Morbi luctus turpis vel purus dapibus scelerisque. Nullam ornare massa in felis porttitor vitae lacinia quam adipiscing.

MOD: You can delete this. TQ

 

[bzy39]

you can try this

http://stackoverflow.com/questions/4288426/facebook-api-how-to-get-the-user-id-with-fbjs-fbml

http://developers.facebook.com/search?q=Users.getLoggedInUser

 

[Crazy]

Yes this is very easy. Predicated upon a user connecting to the site. Depending on how gullible they are, you can get quite a bit of control of their account. What exactly are you looking to achieve? PM me.

 

[locknload007]

They may be doing something even easier, like OpenGraph

 

[Crazy]

They may be doing something even easier, like OpenGraph

It is their Graph API, however you won't be able to access this data by the user simply navigating to your site. That'd constitute XSS.

 

[locknload007]

Crazy, it is a page tab. No app installed.

Something like

https://graph.facebook.com/me/

http://developers.facebook.com/docs/api

 

[locknload007]

Could be

<fb:name  uid="loggedinuser"  use-you="no"></fb:name>

 

[|BlackMarket|]

Thank all for the info!

Do i need to make an ajax call with the requirelogin flag set to true,only once i receive ajax response i'll be able to access user data.
I noticed that i'm able to see the user id in cookie c_user=xxxxxx (this user id) i m trying to find a way to discover that cookie from FBJS...

you can try this
hxxp://developers.facebook.c o m/search?q=Users.getLoggedInUser

Yes i'm part of the Dev. Forum.

Yes this is very easy. Predicated upon a user connecting to the site. Depending on how gullible they are, you can get quite a bit of control of their account. What exactly are you looking to achieve? PM me.

PM sent.

Crazy, it is a page tab. No app installed.

I spoke to the page owner that he dont use any apps to do it (unless he knows nut and ask others to do it). Sad to say that he dont want to share.

 

[Crazy]

Crazy, it is a page tab. No app installed.

Something like

https://graph.facebook.com/me/

http://developers.facebook.com/docs/api

Oh I know what you mean bro. But, correct me if I'm wrong, but to access that content you need an access token.

 

[locknload007]

They are using Static FBML

/apps/application.php?id=6009294086

 

[Crazy]

They are using Static FBML

/apps/application.php?id=6009294086

Gotcha.

 

[Grizzy]

noope

 

[locknload007]

Grizzly

If you rightclickthe tab, copy the url, paste it into the address par, it has the id I posted above. So, they are using the Static FBML app for their tab. I have no idea if they have static fbml in the tab itself.

 

[Crazy]

Grizzly

If you rightclickthe tab, copy the url, paste it into the address par, it has the id I posted above. So, they are using the Static FBML app for their tab. I have no idea if they have static fbml in the tab itself.

But guys, this is my point. For that app to function on a website, the user must connect w/ the website thus writing a domain-specific cookie w/ the UID, Session Key & Access Token. No?

 

[Grizzy]

sorry

 

[|BlackMarket|]

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Mauris diam enim, auctor pharetra scelerisque non, faucibus at justo. Donec tincidunt consectetur enim sed sodales. Morbi luctus turpis vel purus dapibus scelerisque. Nullam ornare massa in felis porttitor vitae lacinia quam adipiscing.

Thanks buddy!

 

[Grizzy]

all gone

 

[|BlackMarket|]

Gone with the wind....
Oppss...sorry, gone with the delete button!

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Mauris diam enim, auctor pharetra scelerisque non, faucibus at justo. Donec tincidunt consectetur enim sed sodales. Morbi luctus turpis vel purus dapibus scelerisque. Nullam ornare massa in felis porttitor vitae lacinia quam adipiscing.

Mod: You can delete this. TQ

 

[Grizzy]

nothing to see here

 

[|BlackMarket|]

well...nothing to see here too.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Mauris diam enim, auctor pharetra scelerisque non, faucibus at justo. Donec tincidunt consectetur enim sed sodales. Morbi luctus turpis vel purus dapibus scelerisque. Nullam ornare massa in felis porttitor vitae lacinia quam adipiscing.

Mod: I'm editing this post, so please delete it