FAcebook Methods: fb.captcha

facebook_captcha.jpg

Image source

You can now secure your application from automated scipting attacks by using fb.captcha.

It

renders a CAPTCHA on your canvas page inside of a form. When that form is submitted to a canvas page, your callback URL will be called with the additional POST parameter fb_sig_captcha_grade=1 to indicate a successfully completed CAPTCHA.

Example:

Just put this code on your canvas page inside of a form:

<form action=index.php method=post>
<fb:captcha showalways=true />
<input type=submit />
</form>

Read more…

Facebook Methods description: marketplace.search

anna_150.jpg

Will search the logged in users’s networks for listings matching the category, subcategory, and query provided.

Read more…

Facebook Methods description: photos.upload

anna_150.jpg

Uploads a photo owned by the current session user and returns the new photo. See photo uploads for a description of the upload workflow. The only storable values returned from this call are pid, aid, and owner.

Read more…

Facebook Methods description: photos.createAlbum

anna_150.jpg

Creates and returns a new album owned by the current session user. See photo uploads for a description of the upload workflow. The only storable values returned from this call are aid and owner.

Read more…

Facebook Hack: How to Easily Get Access to Limited Profile of Non-Friends

anna_150.jpg

The following description is an easy way to get access to the limited profile of a user from which you should not be allowed to see any part of his (her) profile except a small picture and a name as you can see it on the following sample:

facebook_simpsons1.jpg

The only think to do is to send a message to the concerned user you want to get access to his limited profile and wait his answer (hoping he or she will answer).

facebook_simpsons2.jpg

As soon as he answer, Facebook authorize you to see the limited profile of the user for one week (date starting from the answer).

So as a user, don’t forget that when you answer to someone (who sent you a message) who is not in your friends list, you will allow this person to access your limited profile.

ps: if you like ore dislike this kind of post, please let me know.

Facebook Methods description: photos.addTag

anna_150.jpg

Adds a tag with the given information to a photo. See photo uploads for a description of the upload workflow.

Read more…

Facebook News (hack): XML Sitemaps & FBML? New Facebook Vulnerability? - Part 2 1st of April

Do you remember my past article with the following title:

“Facebook News (hack): XML Sitemaps & FBML? New Facebook Vulnerability?”

magritte.jpg

In a news from developers.facebook.com from March 12, 2008 and according to Alex Moskalyuk:

“Starting today, you can serve XML sitemaps off apps.facebook.com domain, and notify search engines about changes on your pages. Naturally, this works better for pages that display content without requiring logins.”

This is indeed a really nice news for apps developers… But this implies:

“Facebook will serve any file with “.xml.gz” extension without interpreting it through FBML parser.”

Might this “non-interpretation” be dangerous in any kind of way? A new vulnerability in Facebook?

Read more…

Facebook Methods description: profile.getFBML

anna_150.jpg

Gets the FBML that is currently set for a user’s profile. See the FBML documentation for a description of the markup and its role in various contexts.

Read more…

Facebook Methods Description: Admin.getAllocation

anna_150.jpg

Returns the current allocation limits for your application for the specified integration points. Allocation limits are determined daily. Integration points include:

Read more…

Facebook Methods description: profile.setFBML

anna_150.jpg

Sets the FBML for a user’s profile, including the content for both the profile box and the profile actions. See the FBML documentation for a description of the markup and its role in various contexts.

Read more…