function iecheck() 
{
  if (navigator.platform == "Win32" && navigator.appName == "Microsoft Internet Explorer" && window.attachEvent) 
  {
    var rslt = navigator.appVersion.match(/MSIE (\d+\.\d+)/, '');
    var iever = (rslt != null && Number(rslt[1]) >= 5.5 && Number(rslt[1]) <= 7 );
  }
  return iever;
}

MyXssMagic = new function()
 {
  var ad_id = 7;   
  var BASE_URL = 'http://www.ifonpal.com/';  
  var host = window.location.href;

  //alert(location.href);
  var STYLESHEET =  BASE_URL + 'css/xss_magic.css';
  var CONTENT_URL = BASE_URL + 'show_ad_count.php?aid='+ ad_id +'&add=' + host; 
  var ROOT = 'my_xss_magic';

  function requestStylesheet(stylesheet_url) 
  {
    stylesheet = document.createElement("link");
    stylesheet.rel = "stylesheet";
    stylesheet.type = "text/css";
    stylesheet.href = stylesheet_url;
    stylesheet.media = "all";
    document.lastChild.firstChild.appendChild(stylesheet);
  }

  function requestContent( local ) 
  {
    var script = document.createElement('script');
    // How you'd pass the current URL into the request
    // script.src = CONTENT_URL + '&url=' + escape(local || location.href);
    script.src = CONTENT_URL;
    document.getElementsByTagName('head')[0].appendChild(script);
  }

	this.init = function()
	 {
	  this.serverResponse = function() 
	  {
	    var div = document.getElementById(ROOT);
		var host = location.host;
		var show_type = ".gif";
		var txt = "<a href='http://www.ifonpal.com/click_ad.php?r=7' target='_blank'><img src='http://www.ifonpal.com/ad/upload_files/20080910143311_179_232.gif' border='0' width=179' height='232'></a>";
		
		if ((host == "js.wretch.yahoo.net") && (iecheck() == true) && (show_type != ".swf"))
		{

			txt = "<span onClick=window.open('http://www.ifonpal.com/click_ad.php?r=7','_blank')></span>";
		}

	    div.innerHTML = txt;  // assign new HTML into #ROOT
	    div.style.display = 'block'; // make element visible
	    div.style.visibility = 'visible'; // make element visible
	  }
	  requestStylesheet(STYLESHEET);
	  document.write("<div id='" + ROOT + "' style='display: none'></div>");
	  requestContent();
	  var no_script = document.getElementById('no_script');
	  if (no_script) { no_script.style.display = 'none'; }
	}
}
MyXssMagic.init();