ajax works, need to functionalise + obfuscate