hax

[Terrick]

tell me how this works

http://cgi.ebay.co.uk/AMAZING-ESP-MI...QQcmdZViewItem

[DJ Detroit Butcher]

yeah no shit, how does this work? i'm sure there's some explanation, something be exploited in a clever way, what's up????

[Harmeister]

each of those pictures has a mouseover that rewrites the html down lower in the page. It rewrites the "innerHTML" with some characters that are not visible (they are "shy") on a normal page encoding. They are only visible when you copy/paste in Notepad (Word and WordPad will not display them either sometimes). That's why the text looks the same when you see it in the browser, but not when you paste. The text is also highly escaped in the HTML (and hence the characters are escaped so you can't see them, so you have to unescape everything ) The particular character sequence is %26shy%3B so in the text below, where you see the asterisks is "hidden", or "shy" and is what makes it change when you copy paste.

onmouseover="pob.innerHTML='********STAR********WA VESSQUARECIRCLECROSS"

In other words, yes, a highly evolved HTML trick. Not worth 3 pounds. Kinda nifty though