4
« on: October 12, 2015, 03:09:35 AM »
You are wasting your time, it's not gonna work.
Here's how it works.
You create account
GET /users/register_thank_you.php?saveGame=true&guestId=60447780
Then it triggers this
GET /users/ajax/daily_spin_popup.php?action_token=df1dd1d3c5ade92804693d81c77e3d6a
This action_token is nothing magical, as far as i could tell it's pretty much static, never the less. Server actually verifies how many times you have spinned, so there is no cheating.
And now it triggers this
GET /data/images/OWDailySweepstakes.swf?prize1=token:50&dayOfWeek=7&numOfDays=0&inTFActionToken=df1dd1d3c5ade92804693d81c77e3d6a
These arguments are just for flash, in reality nothing depends on it, besides showing that you won 50 tokens.
And now the last part.
GET /users/ajax/activate_promo_item.php?rewardSpin=1
I assume it does pretty much what it says it does, activates what you won.
Your price is created on the server side, you can't manipulate it just by editing some fields on the client side.
GET /users/ajax/daily_spin_popup.php?action_token=df1dd1d3c5ade92804693d81c77e3d6a
This is was creates your price, token is probably just your username and that's it.
End of story, but good luck anyways.