4 ms·
https://graph.facebook.com/michaelfairley/picture?type=large https://graph.facebook.com/michaelfairley/picture?type=large for the picture. Friends can be acces
by michaelfairley 15y ago
https://graph.facebook.com/michaelfairley/picture?type=large https://graph.facebook.com/michaelfairley/picture?type=large for the picture.
Friends can be accessed similarly, but require an access token (_any_ access token, not just the user's that you're inspecting.
More details at Facebook's API docs: https://developers.facebook.com/docs/reference/api/user/ https://developers.facebook.com/docs/reference/api/user/
- fudged71 15y agoWow. I am shocked that information I explicitly block to users (such as profile picture) are publicly available through a simple URL trick.
- brown9-2 15y agoFriends can be accessed similarly, but require an access token (_any_ access token, not just the user's that you're inspecting. This would seem to be a bug if so, according to this page in the FB documentation: To get additional information about a user, you must first get their permission. At a high level, you need to get an access token for the Facebook user. After you obtain the access token for the user, you can perform authorized requests on behalf of that user by including the access token in your Graph API requests: https://developers.facebook.com/docs/reference/api/ https://developers.facebook.com/docs/reference/api/