Quote from: Xavier59 on October 15, 2016, 02:57:29 PM

Quote

I did read it. You fail to mention the need for valid hash to confirm any of those actions. Why? Because it would be less sensational, I guess.

That's the point ! There is no need of valid hash to confirme those actions ! Check yourself !
Here is a capture of the complete request !

https://i.gyazo.com/0afa447c3c27f5d5076d0d8f3264fc1d.png

Since source code is client side i suggest you read up on how a "buy transaction" is done.

Code:

$("#buyForm").submit(function (event) {
event.preventDefault();

if ($("#dimmer").is(":visible"))
return $("#alertDivOK").click();

if (document.getElementById('buyAmount').value < 0.0001) {
$("#result").empty().append("Amount must be greater than 0.0001.");
showAlert();
return;
}

if (document.getElementById('buyRate').value < 0.00000001) {
$("#result").empty().append("Price must be greater than zero.");
showAlert();
return;
}

showProgressBar();
var $form = $(this),
url = '/private.php';
params = { currencyPair: currencyPair,
rate: $('#buyRate').val(),
amount: $('#buyAmount').val(),
command: (margin ? 'marginBuy' : 'buy')};
if (margin)
params['maxRate'] = $("#buyMaxRate").val() === undefined ? 0.005 : $("#buyMaxRate").val();

if (webSocketCall(params))
return true;

var posting = $.get(url, params);
posting.done(function (data) {
var content = $(data);
$("#result").empty().append(content);
showAlert();
updatePrivateInfo();
});

});

Code:

bluewaters

Posts

Merits