I've experienced security issues with this mod enabled and would like to know what the point of this code is:
Code:
<script type="text/javascript">
(function ($) {
$(window).load(function() {
$('#aweber-form').submit(function() {
$(this).attr('action', 'http://www.aweber.com/scripts/addlead.pl');
if (!$('#it_email_1').val().length) {
alert('Please enter your email address.');
return false;
}
setTimeout(function() { window.location.href = '{vb:raw redirect}'; }, 1000);
return true;
});
$('input[type="reset"]').click(function() {
window.location.href = '{vb:raw redirect}';
});
$('#webmaster-email').click(function() {
$('#it_email_1').val("{vb:raw vboptions.webmasteremail}");
return false;
});
});
})(jQuery);
</script>]]>
and also this one:
Code:
$_HIDDENFIELDS = array(
'meta_web_form_id' => '317459914',
'meta_split_id' => '',
'listname' => 'vbresults',
'redirect' => 'http://vbresults.com/blog/confirm/',
'meta_adtracking' => 'yellowslider',
'meta_message' => '1',
'meta_required' => 'email,custom Authentication Token',
'meta_tooltip' => '',
'custom Authentication Token' => substr(strtoupper(md5($_SERVER['REMOTE_ADDR'] . md5($_SERVER['SERVER_ADDR'] . md5(COOKIE_SALT)))), 0, 13)
);