"Secret Stash" For Hacking

Lately I feel so lazy to collect loot from the secret stash feature.. I always try to get the loots sent on my wall page..

Check the screenshot below please..

Yep! Looks like I am unable to get the loots each time I click on the "Get your loot" button there..

Does our mafia get the secret stash loot when we help them on this feature?

By the way, I heard rumor about secret stash which being used for hacking our account!
Saw this post on one page : Surabaya Downtown Mafia.

Some cracker (bad hacker) can simply embedded javascript into this Secret Stash. If you click on the modified "Get your loot" button sent by them, it will instantly send our session cookies to their computer.

Of course they will be able to do bad thing, for example : stealing our loots!

Well, I am not an expert of this issue.. but we can prevent this loot thiefs from doing their action!
How to?
There are several ways :

• Checking whether it is a genuine Secret Stash from Zynga or not!

Move your mouse on top the "Get your loot" button, don't click on it yet! We will just check it first. The real link is like this one :

http://apps.facebook.com/inthemafia/index.php?next_params=...........
See the screenshot below..

The modified link will be started with the text "javascript:...". Never click on the link! Quickly remove that secret stash from your wall!

Feel free now to click on get loot if you have checked it..

• Second way, from now on, be cautious if you see ONE person send you to get the loots from this in a sequence of numbers, quickly remove him/her from your FaceBook friends!

Let's say they send 3 Secret Stash requests in a series..
It will be impossible someone can do 2 or 3 in a row!

I can not explain furthermore about this as I am not one hacker! Just for you information, my friends.. Be safe!

PS : Credit goes to Ario from Surabaya Downtown Mafia!
http://www.facebook.com/SurabayaDowntownMafia