Grave

.

Have anyone else tried this? 

So why are you advertising this instead of whoever is responsible for the site? Seems a little sketchy that the creator isn't known but is asking for API keys 

Edit: there is also a button that simply says "mug" on any items page, and it throws an error if I try to click it while not logged in (without an API key). I haven't provided a key yet to see what it does but the URL of the link indicates it calls a function directly and checks for muggable players:

https:// tornexpress. co. za/functions/scripts/bazaar_mug_check.cfm?item_id=206

And why the need for a minimal key instead of public only? The terms of service tells me literally nothing. 

This entire thing just seems really sketchy to me. 

Who is the owner/developer/creator?

What exactly are the API keys used for?

.... what does the mug button do?

🍿💀🍿

By loging in you agree to the use of you API Key And Data Storage and Access.

I am so not "loging" in

I got home and was bored. So with the help of a couple friends and me providing the site an API key (that I later deleted), for investigative purposes, I have been able to draw a few conclusions. Hoping that the site owner, SAShapeShifter, will reach out to clarify some details before anyone sends him any xanax. 

Load image

(the above picture is for a subscription to a half-baked mug bot)

• The sites owner appears to be SAShapeShifter, or at least that's the one collecting xanax payments
• The mug button does nothing but throw an error even when logged in
• The discord invite link provided on the site is invalid
• The mug functionality seems to be the sites bread and butter..at least that's what the owner thinks based on the price points shown above
• My API key when provided didn't call anything but "basic" upon first login. I left it for about 20 minutes and it wasn't used again. Then I logged out of the site, deleted my API key from Torn, and tried logging into the site again (with that same API key). It let me right back in without any errors. So clearly my API key is being stored..but not used. Why? If it's needed only for verification purposes then the key itself doesn't need to be stored indefinitely. If it's being used for the mugbot then that would definitely require explicit disclosure. 
• I did get curious, so I checked the logs of my own server and compared data from the site against that from TornW3B and it doesn't appear that they're using my site to source their data. Not sure where they're getting their bazaar data from, especially since my key wasn't used for anything outside of getting my profile.

Conclusion: This site was either generated purely as a poorly thought up scam, or is far from being finished and the OP wasn't supposed to share the website. Though I'm inclined to doubt the latter. 

Wait the JxD Crybaby post guy? Why would he have a mug bot after making such a big deal about being mugged......?

Here's his tool announcement thread, idk why it was in the Trading forum

https://www.torn.com/forums.php#/p=threads&f=10&t=16495610

To the creator, was this vibe-coded? Just curious. The broken buttons could be a dev thing, could be an "I don't actually know what I'm doing" thing.

Morning all.

I am the creator of https://tornexpress.co.za

BTW thanks for the nice comments on  the site.

I didn't post about it and have been recommending it offside as to try avoid forums for a while.

As 2 one of the comments about JxD why would I add it.

Again the meaning of that entire post was taken wrong.

I'm not against the mugs I get muggednoften. When a  mugger gets taken they must not complain.

But that's not the poit of the post and let's leave it.

The site I have built. It's not perfect but has lots of functions that I use. I wrote them for me originally

??(haha just got mugged while typing)

So it is there for others to use if you wish.

More features are comming.

The OP is  site user no staff. But has been i  touch giving me tips and bug reports.

If anyone has improvements or bugs feel free to send to me.

I see someone posted broken button ill dm them morning and fix.

Hi weaver.

Nice write up.

Yes I don't source or scrpe your site.

My searches are independent of yours.

As afar as a scam, that the site is not.

Yes the site is far from finished. Lots of stuff to do however it is functioning.

And getting more users everyday.

As forr the api key storage I used to torn requests for the functions you use.

The only keys I use while you not on the site is for bazaar scan. 

That is if  you want me to scan you bazaar more often than my default.(similar to your site i assume)

And for the trade option (The custom key) there it reads your logs continuously in order to build your trade profile.

As for the mug module I use your own api key to do the profile calls for status as it displays the data.

Thanks ill add that to my api statement on the home page.

Also thanks for letting me know you can login even if a key is deleted. That would cause errors with functions of the site.

I'll make sure to fix it.

May you have  great day further

Sorry I'm new to forum posting I didn't know there are many replies already cause there's no notification

It's so early in development stage IMO.

And I agree there are a lot of room for improvement.

Btw I'm a fan of your creation, glad we can interact here!

And sorry if it sounds like advertising.

I just tried to write it as best as possible for my first forum post ever.

I planned to write new players' guide to earn money and thought this would be a good way to start.

I'm open to suggestions

Good afternoon all.
I have taken the points mentioned above and already fixed the following.

1) Broken buttons if using quick search without login. (Thanks 0xHemlock)
2) I have removed the standard API saving and only store that in session. I need the player_id only anyway.
I also validated the key on each login now. (Thanks, Weav3r).
3) Tems of API usage also updated. (Weav3r and UnlimitedPain)

Please reach out if you would like to use a feature and if you find any problems.
As stated its still far from complete. But will get there. Suggestions also welcomed