Renren.com's lottery host for seven years can be shaken without limits.

Http://seven.renren.com/websitecelebrate here there is a lottery machine, shake a bit, the result is not in, prompting the next shake to be in the next hour. The http://s.xnimg.cn/a49632/actimg/12anniversary/js/anniversary.js found such a Javascript file that contains the basic whole of the 7th anniversary page. XN. act. embedFlash (); // you cannot click if (isLotteryed) {jQuery ('. lottery-btn '). addClass ('lottery-btn-un '); jQuery ('. lottery-btn '). click (function () {return false ;});} else {jQuery ('. lottery-btn '). click (function () {if (this ). className. indexOf ('lottery-btn-UN') =-1) {jQuery ('. lottery-btn '). addClass ('lottery-btn-un '); XN. act. run (); return false ;}}); only the lottery button is disabled and XN is displayed. act. run ();, move this to the onclick event of any other link in the page. <A onclick = "XN. act. run (); return false; "href =" javascript:; "class =" lottery-check "> view the latest winning list & gt; </a> each time you click the "view winning list" Link, you can see that the slot is turned on.

Solution:Verify that you do not only stay locally, but also do not operate on local buttons. on the server side, save the data that has been shaken and restrict the start of the lottery server.