Protect Myself From XSS Scripting?
Mar 9, 2010If i use this to protect myself from XSS scripting, do you think that it will be enough? code...
View 2 RepliesIf i use this to protect myself from XSS scripting, do you think that it will be enough? code...
View 2 Replieshow can I copy protect the text content of my webpage?
View 23 Replies View RelatedIM new to all this but the following code will deter visitors to your site, who have limited knowledge, copying your content. where nothing is 100% it will stop the chancers taking your hard work and using it as their own, I hope.
<script language="JavaScript">
<!--
var popup="Sorry, right-click is disabled.
This Site Copyright ©2002-2003";
function noway(go) {
if (document.all) {
if (event.button == 2) {
alert(popup);
return false;
}
}
if (document.layers) {
if (go.which == 3) {
alert(popup);
return false;
}
}
}
if (document.layers) {
document.captureEvents(Event.MOUSEDOWN);
}
document.onmousedown=noway;
// --> </script>
<script language="JavaScript1.1">
<!-- var debug = true;
function right(e)
{
if (navigator.appName == 'Netscape' && (e.which == 3 || e.which == 2)) return false;
else if (navigator.appName == 'Microsoft Internet Explorer' && (event.button == 2 || event.button == 3)) {
alert('This Page is fully protected! copyright ©2002-2003');
return false;
}
return true;
}
document.onmousedown=right;
if (document.layers) window.captureEvents(Event.MOUSEDOWN);
window.onmousedown=right;
//-->
</script>
How to protect .js files in a serious way?
View 3 Replies View Relatedif speed, size is not a matter, i just want to protect the code as much
as possible, any library or tools do you think is the best solution
right now?
i know there is not a perfect solution, but as good as it can be is
okay...
p.s. need to be cross brower.
In practice you can't. While you could create a suitable
encryption system with a password in the page, the level of
support you need to do this means it's always simpler to do it
server-side. Anything that "protects" a page other
than the current one is definitely flawed.
How do i protect a login against hackers and sql injection ???
View 6 Replies View RelatedI once came across some sites that prevent saving their pages by disabling the 'save' option in the File menu. I remember it was done. But I forgot the url.
How are they doing this? Is it possible to do so with Javascript? It will be great if someone provide me with links for such articles or scripts.
I have a website where i sell items. I need to make it so a customer can go to the site and place a password to purchase a item. Customers sees a item and clicks on "buy now" It can not be a inconvenience where it will prompt for a user/password.
I would like to place a password box, and once a password is entered they will be able to select the "buy now" button. Simple...yes. But i search for 3 hours via the power of google and have yet to find a solution. I want everything to stay on the same page...if possible.
I have seen places like wordpress and joombla do password protect content but i guess it is because the use frames. I would like to do this with just JS and HTML.
For example I have a page: [URL] On this page I use $.ajax:
$.ajax({
type: "GET",
data: "data=123456",
dataType: 'html',
[Code].....
where temp.php - [URL] On temp.php I use requests for DB with param from $.ajax - data=123456. How I can protect page temp.php? For example, somebody typing [URL] and then he can get all results. I found one solution - using if($_SERVER['HTTP_REFERER'] == "http:// mysite.com/content/") {....} But Am not shure that it can realy protect my page?
I made this JavaScript that password protects a page. But the password you type in is completely visible! I want it so that the password are those black dots for each letter....
Here is the script:
I wanted to know is it possible to password protect some files in web page?For example, If someone wants to download file, browsers requests password(one for all visitors), idea is that some files and/or sections of web site is accessible to those who know the password..
View 9 Replies View RelatedI'm developing very advanced web-based intranet application that uses a lot of very complex JavaScript for interface, including charting via ActiveX components and other processing.
Obviously I'm tempted to make the analysis of the javascript code very hard for people who may wish to steal my code and/or ideas.
Is there is anything I can do to make analysis of .js code difficult for *professionsals*?
Let me start out by saying that this is for a small-time page with absolutely zero valuable information. PHP or server-side is way beyond the scope of my goals for the project.
Basically, I have a form on a page which I want to use to submit a password. However, I have realized that using the form submit always makes the browser return to the page with the form.
Well, that's not good when I want to redirect using javascript!
My javascript is:
Code:
My form HTML is:
Code:
How can I get this to stop going back to the page with the form after I submit it?
i am very new to VB and right now given a task to delete specific folder from the folder tree. i am able to delete the folder from the first sub folders. but i have to look in every folder for that specific name of folder and delete that.
that is i have a folder Z and want to delete folder x in the folder tree after z
Z
a1
d2
f3
g4
x5
x2
e2
h3
x4
x3
x2
b1
c1
so the task is to find all the folder with name x and delete them.
If I have a list inside a <div> is there anyway to add another. Example:
<div name=test>
<ul>one</ul>
<ul>two</ul>
</div>
Now later on if the user clicks a button can I add:
<ul>whatever the user typed in</ul> after "<ul>two</ul>" <-- note this is not php
I've a personal application I would like to script, that would
bring up a particular web page (which happens to have a Flash application
on it), then every 15 minutes or so generate the equivalent of
clicking on a button (causing the application to retrieve and display
the latest info).
Anyone know of any articles or howtos on the web for writing such an
application? Code:
I have another question... with the script I have for the gallery, its supposed to do this: http://www.dynamicdrive.com/dynamici...tbox/index.htm
but the problem is, its showing up within the iframe and not out in the open so you can see the whole picture... anyway around that?
I'm working on a project using JQuery and Keith Woods' extension to provide SVG functionality. My final goal is to develop some kind of HMI/SCADA implementation. My intention is to have an svg graphic representing some kind of process and then change certain shapes parameters from scripting part.
I'm pretty new to Javascript, JQuery and so on. But I'm trying to make my way by reading a lot on internet. However I couldn't find a clue about my most recent issue.
Mi idea is to embed and svg file created before on Inkspace. This would be the skeleton of the process I want to represent. Then, from the html document where this svg file is embedded, I want to alter certain parameters of the shapes inside, for instance I want to change the colour of a particular rectangle.
So, I embed the file in the html document like this:
[Code]...
I am remote scripting using javascript to an XML gateway, the XML file I get back changes state i.e. either the car registration number exists (and it includes certain fields in the XML) or it doesn't exist (and it doesn't include certain fields).
When my code tries to display the result I am getting the 'object required' error because I am trying to access an xml element which doesn't exist.
For example this line would break if the plate didnt exist but work perfectly if it did:
var fuel = response.getElementsByTagName('Fuel')[0].firstChild.data;
Is there anyway to stop it throwing an error if it doesn't exist and just set a regDoesntExist flag or something?
I'm a greenhorn in SVG and javascripting but I'm learning by doing.
So, here my current problem question :
I have a svg document embedded in another svg document. I whant,
through functions in an external javascript file, manipulate objects
in either the child svg document or the parent document.
How do I get access to elements of the other document ?
Example : I have a document "A" containing X/Y - Axis and included
another svg document "B" with the graphs.
I whant now, as soon as the mouse cursor is over a graph in document
"B" the belonging lable which is located in the parent svg document
"A" to change color or size.
Or I whant the graph in "B" to start blinking as soon as the mouse is
over the lable in "A".
I don't know how cross document borders.
Can anyone give me a short exapmle to get me going?
I have some doubts about this meta tag:
<META http-equiv="Content-Script-Type" content="text/javascript">
Do I really need to declare this meta tag in all my pages?
If I declare it, will I still need to create my scripts this way?
<script type='text/javascript'>
Is there any advantage/disadvantage when using it?
I am trying to use a value from the select field to replace text within a strong tage;
Code:
<strong id="selected_country">Country Will appear here</strong>
So far the script anounces the selected country using alert. Here is the scrupt so far:
Code:
function getCountry()
{
// Validate that the browser knows getElementById
[code]....
is it possible to have a script that waits until the Adense javascript is done selecting ads, and then uses that data to do something.
for instance, the script checks if "Laptop" exisits in the link text of an adsense ad, and then proceeds by downloading (XML-RCP?) a picture of a laptop from the server.
It's important that the code does not interfere with the adsense script itself because that violates their TOS, but is it possible to just "read" the data that it generates?
I'm wondering about a very strange behaviour in a javascript: In my
web application, there are a few SVGs (Adobe SVGViewer 3.0) embedded
by OBJECT-tag in an HTML-File. By starting a (globally known)
JS-Function in the "Menu"-SVG, it creates a new SVG-Node-Tree and
appends it to a anchor-Node in an "Display"-SVG. This means, a
function called in one document creates SVG-Eelements in another
document. This works fine, if a simple JS-alert is included at the
beginning of the SVG-creation-process. If not, it doesn't work - no
SVG is created. IMHO, i can exclude a runtime error, for that i
analyzed it quite intensive. In my opinion, the problem could deal
with restrictions on scripting over document borders. Nevertheless, i
don't understand it. Does anybody have experience with that kind of
behaviour? Does an alert have such influence on something like a
"focus" on a document?
Is it possible to run an HTML file from "localhost" and bypass the
various security checks in place for cross-frame scripting? For
example, on a 2-frame page loaded locally:
a) frame 1 includes a form that accepts the name of a web site
(example: www.foo.com), which a script or perhaps a "target" attribute
then loads into frame 2
b) frame 1 waits for frame 2 to load, then reads (for example)
top.frame2.document.images.length and displays the total in frame 1
I realize that "localhost" is not going to match the domain appearing
in frame 2, but as I myself am running the script, logically, where is
the harm?
I haven't done much testing with this yet, but am planning an
application around this concept and am hoping I can make it work. Any
pointers?