How to authenticate my form using javascript

Question

there

i need to authenticate before request to the url, if i use XMLHTTPRequest, things go fine

var xmlHttp = ...//some code goes here
xmlHttp.Open('POST','http://www.somesite.com/',false,userID,password);
xmlHttp.Send(null);

But if i need to use a form, like below

>var objForm = eval(formString);
>objForm.target='demoFrame'; //where demoFrame is an iFrame in another page
>objForm.action='http://www.somesite.com/';
>objForm.username.value=userID;
>objForm.password.value=password;
>objForm.method='post';
>objForm.submit();

But seems that the objForm cannot use "username" & "password" as the input for authentication, since i keep receiving "authentication failed" message from the host site

Any idea?

Thanks

Out of curiosity, why is eval in JavaScript so bad? Any user can run what ever JavaScript he wishes in a website anyway using FireBug or an equivalent — Hubro
– Hubro, Commented Jul 12, 2011 at 16:40
@CodeMonkey: eval can allow an attacker to run Javascript on someone else's compute (if he can modify the string being evald). It's also very slow. — SLaks
– SLaks, Commented Jul 12, 2011 at 16:41

SLaks · Accepted Answer · 2011-07-12 16:36:32Z

3

I assume that the other site is using HTTP Basic authentication.

Set the action to 'http://' + userId + ':' + password + '@www.somesite.com/'

answered Jul 12, 2011 at 16:36

SLaks

891k182 gold badges1.9k silver badges2k bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Leo.W Over a year ago

i've just try, but failed with no luck

mplungjan Over a year ago

I am pretty sure that is not a) possible in many browsers b) clever since it shows the userid and password in the url

Leo.W Over a year ago

Or is it possible that i use XMLHTTPRequest to open a page in an iframe? If i have to use XMLHTTPRequest to authenticate...

SLaks Over a year ago

@Leo: Depending on the site, that may be possible. Try it.

Collectives™ on Stack Overflow

How to authenticate my form using javascript

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related