tags:

views:

84

answers:

3
<script language="JavaScript">
eval(unescape('window.status='Opening Pagehttp://www.abesofmaine.com/category.do?group1=Binoculars''));
s=unescape('<embed src='http://www.anrdoezrs.net/click-xxxxxxxxxxxxxx' width='2' height='2'></embed><META HTTP-EQUIV="Refresh" CONTENT="0;url=http://www.abesofmaine.com/category.do?group1=Binoculars"&gt;');eval(unescape("document.write(s);"))
</script>
+3  A: 
  1. What is your question?
  2. You're using eval. Don't.
Andrzej Doyle
3. You're using `unescape`. Don't.
bobince
`document.write` isn't exactly amazing, either...
Andrzej Doyle
+2  A: 

Why not just:

<script language="JavaScript">
window.status='Opening Pagehttp://www.abesofmaine.com/category.do?group1=Binoculars';
s='<embed src="http://www.anrdoezrs.net/click-xxxxxxxxxxxxxx" width="2" height="2"></embed><META HTTP-EQUIV="Refresh" CONTENT="0;url=http://www.abesofmaine.com/category.do?group1=Binoculars"&gt;';
document.write(s);
</script>
Lukman
+1  A: 

Aside from the use of eval, it looks like your problem is in the nesting of single quotes in your strings. Try:

<script language="JavaScript">
eval(unescape('window.status="Opening Pagehttp://www.abesofmaine.com/category.do?group1=Binoculars"'));
s=unescape('<embed src="http://www.anrdoezrs.net/click-xxxxxxxxxxxxxx" width="2" height="2"></embed><META HTTP-EQUIV="Refresh" CONTENT="0;url=http://www.abesofmaine.com/category.do?group1=Binoculars"&gt;');eval(unescape("document.write(s);"))
</script>
Mike Clark