why does this paid shoutbox mod not use csrf tokens or something to prevent spamming of the shoutbox?
var spam = ["submit", "spam message", "val", 'input[name="message"]', "log"];
/** @type {number} */
var i = 0;
for (;i < 1E4;i++) {
$(spam[3])[spam[2]](spam[1])[spam[0]]()...