Solved

Only send certain fields

Posted on 2003-11-21
8
218 Views
Last Modified: 2010-04-09
Is there anyway I can choose which fields i want sent in a posted form?
I currently have the fields user and pass and enc in a login form.
Enc is an encryption of pass.
I only want to send user and enc.

I have thought about just encrypting pass into the pass field when the user attempts to login, but i don't want to do it this way.

Is there any other option i can try?
0
Comment
Question by:enasni_mark
8 Comments
 
LVL 8

Expert Comment

by:Barry62
ID: 9800093
Here you go!

<html>
<head>
<title></title>
<script type="text/javascript">
function encryptit(){
  /*encryption
     code
     goes
     here
  */
  testform2.enc2.value = //encrypted password
  testform2.user2.value = testform.user.value;
  testform2.submit();
}
</script>
</head>
<body>
<form name="testform" onSubmit="encryptit();">
Username: <input type="text" name="user"><br>
Password: <input type="password"><br>
<div align="center"><input type="submit">
</form>

<form name="testform2" action="somepage" method="post">
 <input type="hidden" name="enc2">
<input type="hidden" name="user2">
</form>
0
 

Expert Comment

by:TigerBoy
ID: 9800100
You could always add a onSubmit event that will remove the pass field from your form before sending it.

onSubmit="mForm.pass.value = ''; return true;"

0
 
LVL 16

Expert Comment

by:jaysolomon
ID: 9800195
how are you encrypting your code?
0
 
LVL 8

Expert Comment

by:Barry62
ID: 9800386
he's not encrypting his code, just the password that the user enters. :)
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 58

Expert Comment

by:Gary
ID: 9800928
<script language=javascript>
function submitform(){
document.myform2.user.value=document.myform1.user.value
document.myform2.enc.value=document.myform1.enc.value
myform2.submit()
}
</script>

<form name=myform1>
<input type=text name=user>
<input type=text name=pass>
<input type=text name=enc>
<input type=button onclick=submitform()>
</form>
<form name=myform2 action=page2.asp>
<input type=hidden name=user>
<input type=hidden name=enc>
<input type=button onclick=submitform()>
</form>
0
 
LVL 11

Expert Comment

by:Zontar
ID: 9801258
Depending on JS to do encryption is not a very good idea IMO.

If you need that much security, consider using SSL.

Otherwise, many serverside programming languages and databases provide ways to encrypt/decrypt passwords.

E.g. in PHP/MySQL:

$user = $_POST["username"];
$pass = $_POST["password"];

$q = "SELECT userid FROM users WHERE username='$user' AND password=MD5('$pass')";
if(mysql_num_rows( mysql_query($q) ) == 1)
  $login_status = TRUE;
0
 
LVL 31

Accepted Solution

by:
GwynforWeb earned 125 total points
ID: 9801483
Disable the fields before submission. I have demonstrated for 'get' but it works for post as well. (google is great for seeing what gets sent)

<form onSubmit="t3.disabled=true;t4.disabled=true; return true" action="http://google.com">
<input type="text" name="t1" >
<input type="text" name="t2">
<input type="text" name="t3">
<input type="text" name="t4">
<input type="submit"" value="submit">
<form>
0
 
LVL 31

Expert Comment

by:GwynforWeb
ID: 9806687
Thanks, :-)
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you tried to learn about Unicode, UTF-8, and multibyte text encoding and all the articles are just too "academic" or too technical? This article aims to make the whole topic easy for just about anyone to understand.
Building a website can seem like a daunting task to the uninitiated but it really only requires knowledge of two basic languages: HTML and CSS.
In this tutorial viewers will learn how to position overlapping items using z-index in CSS. They will also learn the restrictions on the z-index property.  Create a new HTML document with an internal stylesheet.: Create a div in CSS and name it Red.…
In this tutorial viewers will learn how to embed videos in a webpage using HTML5. Ensure your DOCTYPE declaration is set to HTML5: "<!DOCTYPE html>": Use the <video> tag to insert a video. Define the src as the URL of your video; this is similar to …

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now