digg

Facebook Connect Join Digg About

Stealth Submit Using AJAX

virtualkarma.blogspot.com — How the "Bad Guys" could use AJAX to capture information without your knowledge. Complete with example and code...

Who dugg this?

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

1 Comments

show profanity settings
expand all
  • Bogtha, on 10/12/2007, -0/+1This has been possible since Netscape 2.0 was released with Javascript support. Add an onchange handler to a textarea that creates an Image() with a src of example.com/sneaky.gif?text=xxx×tamp=xxx. Typing something into the textarea will trigger the handler, creating the image will request that image from your server, then you just have to look at your logs to see what people have been typing.

    If you don't want websites to know what you type into their forms before you submit them, then either unplug your network cable after loading the website and plug it back in once you have decided you definitely want to submit the form, or disable Javascript and browser plugins.

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...


© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.