Scratch

technoboy10 · 2012-09-09 13:39:11

What/where are the APIs for Scratch?

jvvg · 2012-09-09 13:47:31

The only API I know of is the one to authenticate users, which is:

Code:

http://scratch.mit.edu/api/authenticateuser?username=jvvg&password=[I'm not saying my password]

jvvg · 2012-09-09 13:53:38

Actually, looking at the source code, I found some other ones, such as...

Code:

http://scratch.mit.edu/api/getgalleryinfobyid/24994 - gets info for a gallery by the ID given
http://scratch.mit.edu/api/getnumprojectsbyuser/jvvg - gets the number of projects uploaded by the given user
http://scratch.mit.edu/api/getnumcommentsbyuser/jvvg- gets the number of comments by the given user
http://scratch.mit.edu/api/getpcommentsbyid/255443 - returns all comments on the given project
http://scratch.mit.edu/api/getusersfavoriteprojectsbyuid/261892 - returns all favorited projects by the given user
http://scratch.mit.edu/api/getprojectblockscount/4447 - returns the amount of blocks in the given project
http://scratch.mit.edu/api/getprojectblocks/1308192 - returns JSON formatted code for the given project
http://scratch.mit.edu/api/get_latest_project/XXXXXXXXXXXXX - returns the latest project of the given user (enter an ID there) in JSON format
http://scratch.mit.edu/api/getblockcountpercategorybyuserid/139 - returns the amount of blocks by the given user by category in JSON format
http://scratch.mit.edu/api/getblockcategorycountbypid/12339 - returns the amount of blocks in the given project by category in JSON format
http://scratch.mit.edu/api/get_remixed_project - returns latest remixes in JSON format
http://scratch.mit.edu/api/getuserspcommentsbyuid/2/3  - returns all comments user A has posted on user B's projects (user ID, not username)

Dominic1 · 2012-09-09 14:42:55

someone could make some awesome stuff with those API's!!!

DarthPickley · 2012-09-09 16:23:53

btw, API source code is at

http://trac.assembla.com/scratchr/brows … roller.php

Last edited by DarthPickley (2012-09-09 16:24:10)

jvvg · 2012-09-09 16:41:51

DarthPickley wrote:
btw, API source code is at

http://trac.assembla.com/scratchr/brows … roller.php

Yeah, that's where I got the code (I have my own copy of ScratchR working).

Asraelite · 2012-11-16 11:54:01

Does anyone have the API to get a user's id by their name? I really need it.

Gravitation · 2012-11-16 12:19:27

Asraelite wrote:
Does anyone have the API to get a user's id by their name? I really need it.

Yes, here's the PHP code:

Code:

$getuserid = file_get_contents("http://scratch.mit.edu/api/getinfobyusername/" . $username);
$getuserid = explode(":", $getuserid);
$getuserid = $getuserid[1];

Set $username to the username, run this script, and then $getuserid will contain the ID. smile

Asraelite · 2012-11-16 13:11:41

Gravitation wrote:
Asraelite wrote:
Does anyone have the API to get a user's id by their name? I really need it.
Yes, here's the PHP code:
Code:
$getuserid = file_get_contents("http://scratch.mit.edu/api/getinfobyusername/" . $username);
$getuserid = explode(":", $getuserid);
$getuserid = $getuserid[1];
Set $username to the username, run this script, and then $getuserid will contain the ID.

Thanks a bunch smile

Gravitation · 2012-11-16 13:12:32

Asraelite wrote:
Gravitation wrote:
Asraelite wrote:
Does anyone have the API to get a user's id by their name? I really need it.
Yes, here's the PHP code:
Code:
$getuserid = file_get_contents("http://scratch.mit.edu/api/getinfobyusername/" . $username);
$getuserid = explode(":", $getuserid);
$getuserid = $getuserid[1];
Set $username to the username, run this script, and then $getuserid will contain the ID.
Thanks a bunch

No problem! big_smile

majormax · 2012-11-16 15:54:52

Couldn't someone easily write a bruteforcer with the API?

SJRCS_011 · 2012-11-16 16:17:27

majormax wrote:
Couldn't someone easily write a bruteforcer with the API?

theoretically, which is why they're moving away from this and towards cas i believe

s_federici · 2012-11-16 16:20:27

SJRCS_011 wrote:
which is why they're moving away from this and towards cas

Do you mean Central Authentication Service?

technoboy10 · 2012-11-16 17:46:41

s_federici wrote:
SJRCS_011 wrote:
which is why they're moving away from this and towards cas
Do you mean Central Authentication Service?

Yep, I think so.

nXIII · 2012-11-16 21:28:01

majormax wrote:
Couldn't someone easily write a bruteforcer with the API?

The API delays a long time if the username/password pair is incorrect. For example: http://scratch.mit.edu/api/authenticate … mypassword

technoguyx · 2012-11-16 21:46:27

jvvg wrote:
Actually, looking at the source code, I found some other ones, such as...
-snip-

Hey, that's nice to know big_smile

Dominic1 wrote:
someone could make some awesome stuff with those API's!!!

I'm pretty sure I've seen some Scratch mods (Panther?) that call these APIs.

jvvg · 2012-11-16 21:54:55

technoguyx wrote:
jvvg wrote:
Actually, looking at the source code, I found some other ones, such as...
-snip-
Hey, that's nice to know

Dominic1 wrote:
someone could make some awesome stuff with those API's!!!
I'm pretty sure I've seen some Scratch mods (Panther?) that call these APIs.

Mod Share does. smile

jji7skyline · 2012-11-16 22:19:38

nXIII wrote:
majormax wrote:
Couldn't someone easily write a bruteforcer with the API?
The API delays a long time if the username/password pair is incorrect. For example: http://scratch.mit.edu/api/authenticate … mypassword

That's good.

And although 2.0 does have CAS, an API will be provided as well.

Asraelite · 2012-11-17 17:56:53

majormax wrote:
Couldn't someone easily write a bruteforcer with the API?

Yup, I actually have to see if it would work. It does, but it is extremely slow and brute forcing would take months. I doubt someone would spend that much time on a Scratch account rather than a bank account or something.

Hardmath123 · 2012-11-17 20:17:22

jji7skyline wrote:
nXIII wrote:
majormax wrote:
Couldn't someone easily write a bruteforcer with the API?
The API delays a long time if the username/password pair is incorrect. For example: http://scratch.mit.edu/api/authenticate … mypassword
That's good.

And although 2.0 does have CAS, an API will be provided as well.

https://docs.google.com/document/d/1sx3 … -0ktY/edit

nXIII · 2012-11-17 20:45:49

Hardmath123 wrote:
https://docs.google.com/document/d/1sx3 … -0ktY/edit

tongue

Hardmath123 · 2012-11-17 22:31:29

nXIII wrote:
Hardmath123 wrote:
https://docs.google.com/document/d/1sx3 … -0ktY/edit

Oh yeah;

"Courtesy nXIII"

Happy? tongue

sparks · 2012-11-18 04:36:11

Yeah, the API's are cool. I used a lot of them to write the Scratch Forum API, better known as "self updating images and links in text"! I did write a brute force program for it once to generate a list of people who have friended me, since I can only see those that I have friended, but the process is so slow over the API I think I gave up when I realized it would take about ten days to check through all the names.

EDIT: found the old thread! tongue

Last edited by sparks (2012-11-18 04:42:14)

Hardmath123 · 2012-11-18 04:58:01

sparks wrote:
Yeah, the API's are cool. I used a lot of them to write the Scratch Forum API, better known as "self updating images and links in text"! I did write a brute force program for it once to generate a list of people who have friended me, since I can only see those that I have friended, but the process is so slow over the API I think I gave up when I realized it would take about ten days to check through all the names.

EDIT: found the old thread!

I think it was actually 10 months, if I remember right. tongue

EDIT: Well, I remembered wrong. tongue

Last edited by Hardmath123 (2012-11-18 04:58:26)

nXIII · 2012-11-18 11:27:21

sparks wrote:
Yeah, the API's are cool. I used a lot of them to write the Scratch Forum API, better known as "self updating images and links in text"! I did write a brute force program for it once to generate a list of people who have friended me, since I can only see those that I have friended, but the process is so slow over the API I think I gave up when I realized it would take about ten days to check through all the names.

EDIT: found the old thread!

This used to work for friend names, but the 2.0 site APIs are dying and are going to be removed eventually…

Scratch

archived forums

#1 2012-09-09 13:39:11

Scratch APIs?

#2 2012-09-09 13:47:31

Re: Scratch APIs?

Code:

#3 2012-09-09 13:53:38

Re: Scratch APIs?

Code:

#4 2012-09-09 14:42:55

Re: Scratch APIs?

#5 2012-09-09 16:23:53

Re: Scratch APIs?

#6 2012-09-09 16:41:51

Re: Scratch APIs?

DarthPickley wrote:

#7 2012-11-16 11:54:01

Re: Scratch APIs?

#8 2012-11-16 12:19:27

Re: Scratch APIs?

Asraelite wrote:

Code:

#9 2012-11-16 13:11:41

Re: Scratch APIs?

Gravitation wrote:

Asraelite wrote:

Code:

#10 2012-11-16 13:12:32

Re: Scratch APIs?

Asraelite wrote:

Gravitation wrote:

Asraelite wrote:

Code:

#11 2012-11-16 15:54:52

Re: Scratch APIs?

#12 2012-11-16 16:17:27

Re: Scratch APIs?

majormax wrote:

#13 2012-11-16 16:20:27

Re: Scratch APIs?

SJRCS_011 wrote:

#14 2012-11-16 17:46:41

Re: Scratch APIs?

s_federici wrote:

SJRCS_011 wrote:

#15 2012-11-16 21:28:01

Re: Scratch APIs?

majormax wrote:

#16 2012-11-16 21:46:27

Re: Scratch APIs?

jvvg wrote:

Dominic1 wrote:

#17 2012-11-16 21:54:55

Re: Scratch APIs?

technoguyx wrote:

jvvg wrote:

Dominic1 wrote:

#18 2012-11-16 22:19:38

Re: Scratch APIs?

nXIII wrote:

majormax wrote:

#19 2012-11-17 17:56:53

Re: Scratch APIs?

majormax wrote:

#20 2012-11-17 20:17:22

Re: Scratch APIs?

jji7skyline wrote:

nXIII wrote:

majormax wrote:

#21 2012-11-17 20:45:49

Re: Scratch APIs?

Hardmath123 wrote:

#22 2012-11-17 22:31:29

Re: Scratch APIs?

nXIII wrote:

Hardmath123 wrote:

#23 2012-11-18 04:36:11

Re: Scratch APIs?

#24 2012-11-18 04:58:01