22.5.08

Java Junkies beware!

disclaimer: This article is for informational and educational purposes only. Hacking into a internet stores is illegal and is not the intent of this article.

Now you can buy anything, even if someone has taken it off their company store.

Well, that is, if they've not protected the Online Store Product ID to the item you wish to purchase. So you've visited the dynamically rendered web page that does not contain a "add to cart" button. You want to buy that item. The vendor has restricted purchase, sometimes in the hopes of maintaining inventory for a specific client, etc.

We'll have none of that!

Just go to another item that has a "add to cart" button. Copy the javascript shortcut and paste it to your notepad. Notice that it will usually have the Store Product ID (secret number) and the actual (public) Model Number. Now you need to find the secret number for the item you want, that they are not letting you purchase. All you usually have to do is go to the technical information page on the product and look at the URL to get three possibilities for Store Product IDs.

Now you've got three possible Store IDs and one definite model number. Just take the javascript shortcut you pasted earlier and make three different scripts, trying each one until one adds your item to the cart! Once the item is in your cart, they can't stop you from buying it. It's a good idea to take a screen shot of the cart page in case the vendor does not wish to fulfill your order (very rare).

Next week we'll talk about coupon codes!

No comments: