Checked the hack, it's using Javascript.