Page 2 of 2 FirstFirst 12
Results 11 to 16 of 16

Thread: just wondering

  1. #11
    Join Date
    Mar 2005
    Location
    SE PA USA
    Posts
    28,926
    Thanks
    43
    Thanked 3,190 Times in 3,154 Posts
    Blog Entries
    12

    Default

    Is a neopet like a skinhead's dog?
    - John
    ________________________

    Show Additional Thanks: International Rescue Committee - Donate or: The Ocean Conservancy - Donate or: PayPal - Donate

  2. #12
    Join Date
    Apr 2008
    Location
    So.Cal
    Posts
    3,643
    Thanks
    63
    Thanked 517 Times in 503 Posts
    Blog Entries
    5

    Default

    Quote Originally Posted by DjLatinoHeat View Post
    it's moreless for a couple friends who keep shops on neopets... and i can access the HTML. each pet comes w/ a free page.
    HTML and JavaScript are different things; javascript is often [rightly] prohibited for security reasons. But, to find out, add this (or similar):
    HTML Code:
    <script>alert( 'it works!' );</script>
    Quote Originally Posted by DjLatinoHeat View Post
    not really sensitive info, jus wna try keep it so that other shop keepers don't pick up our tricks to stocking and pricing our shops. i can accept a 5% failure rate
    I think Daniel's "failure rate" might be better described as a "vulnerability rate" - it's not that n out of 100 attacks will be able to defeat it, it's that n out of 100 visitors will know enough about what they're doing to defeat it. These people are also the ones most likely to try, and their attacks will succeed every time. The knowledge barrier for defeating javascript password protection is really very low.

    In this situation, the only valid litmus test for "acceptable risk" is "is it just for fun?" If not, then javascript is not an acceptable "solution" at all.
    Last edited by traq; 05-31-2013 at 02:52 PM. Reason: added <script> tags to example

  3. #13
    Join Date
    May 2013
    Posts
    6
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    yes it's just for fun, and neopets is like a gaming site...
    and i tried putting a default copy of it and everything just shows up white... nothing @ all. >.<

  4. #14
    Join Date
    Mar 2005
    Location
    SE PA USA
    Posts
    28,926
    Thanks
    43
    Thanked 3,190 Times in 3,154 Posts
    Blog Entries
    12

    Default

    Quote Originally Posted by traq View Post
    HTML and JavaScript are different things; javascript is often [rightly] prohibited for security reasons. But, to find out, add this (or similar):
    Code:
    alert( 'it works!' );
    Don't you mean:

    Code:
    <script>
    alert('It works!');
    </script>
    - John
    ________________________

    Show Additional Thanks: International Rescue Committee - Donate or: The Ocean Conservancy - Donate or: PayPal - Donate

  5. #15
    Join Date
    Mar 2006
    Location
    Illinois, USA
    Posts
    12,162
    Thanks
    263
    Thanked 690 Times in 678 Posts

    Default

    I'd be surprised, honestly, if you can add Javascript to the page. But I have no idea really. If the code from John's post works, then you can try a password script (they aren't very much more complicated than that, so if that works, the password script should probably work too).
    And, yes, I should emphasize what traq said: I don't mean that it sometimes "won't work"-- I mean that it will always be vulnerable to people who want to get around it. There's no chance that it will stop someone who is motivated.
    Daniel - Freelance Web Design | <?php?> | <html>| espa˝ol | Deutsch | italiano | portuguŕs | catalÓ | un peu de franšais | some knowledge of several other languages: I can sometimes help translate here on DD | Linguistics Forum

  6. #16
    Join Date
    Apr 2008
    Location
    So.Cal
    Posts
    3,643
    Thanks
    63
    Thanked 517 Times in 503 Posts
    Blog Entries
    5

    Default

    Quote Originally Posted by jscheuer1 View Post
    Don't you mean:

    Code:
    <script>
    alert('It works!');
    </script>
    hehe, whoops... yes, that is what I meant.

Similar Threads

  1. Resolved I am wondering
    By ajfmrf in forum JavaScript
    Replies: 5
    Last Post: 01-05-2013, 08:46 AM
  2. was wondering..
    By niksan8787 in forum Flash
    Replies: 13
    Last Post: 04-25-2009, 11:35 PM
  3. Just wondering if...
    By ludo1960 in forum Dynamic Drive scripts help
    Replies: 0
    Last Post: 05-11-2008, 07:50 PM
  4. wondering for me
    By muhammad Taj in forum JavaScript
    Replies: 0
    Last Post: 08-28-2005, 11:46 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •