?
Solved

JavaScript send data to hidden fields on remote server

Posted on 2014-11-04
3
Medium Priority
?
199 Views
Last Modified: 2014-12-10
Hi,

We have an FTP site with PHP that requires a username and password.  This site is for a school to upload videos to.  They are do not want have the students log in and would like the username and password passed for them through the CMS

The CMS allows for JavaScript to be implemented on their custom pages

For security purposes, I do not want to disable the username an password option.  I tried XSS but that is not working.  I tried:

https;//myftsite.com/index.php?username=test

 I need to find a way for those values to be passed through their CMS using JavaScript or HTML (their CMS will only support these).  Currently they are just using iframes and the url to connect to the site

Thank you for your help in advance
0
Comment
Question by:thomasm1948
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 84

Accepted Solution

by:
Dave Baldwin earned 1000 total points
ID: 40422237
If you put the username and password in hidden fields on an HTML page, I can pretty well guarantee you that the students will have them in a week.  Many people 'View Source' on web pages and data in 'hidden fields' are there in plain text.

Look into using a PHP page to do the uploading although the size of the videos may make that impossible.
0
 

Author Comment

by:thomasm1948
ID: 40422342
These are small videos less that 2GB.  I was hoping that JavaScript could pass the values.  We are not worried about the student knowing the passwords being that this just going to be for a competition that they are having.  The instructor just doesn't want them to be hindered by a username and password.

So far the user security for is that once it is uploaded, even if they chose to use FileZilla, they will not be able to view any of the files on the server.  They student login can only upload files and the Instructor username has full permissions
0
 

Author Comment

by:thomasm1948
ID: 40422347
We are using PHP for the upload page.  Currently it requires a username and password.

The FTP site is at a remote location and has a PHP login page for uploading the files.

The CMS that the school is using makes it hard.  I tried C# inline coding and that does work on their system
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Boost your ability to deliver ambitious and competitive web apps by choosing the right JavaScript framework to best suit your project’s needs.
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
In this tutorial viewers will learn how to embed Flash content in a webpage using HTML5. Ensure your DOCTYPE declaration is set to HTML5: "<!DOCTYPE html>": Use the <object> tag to embed Flash content.: To specify that the object is Flash content, d…
The viewer will learn how to count occurrences of each item in an array.
Suggested Courses

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question