Hidden field

[Jacques]

I have a form with a hidden fied on my web page. Is it possible to make the
value of this field the same as the value of a hidden field in a different
web site ? if yes, How can I do that ?

 

[Murray]

How would you see the hidden field in the other website?

 

[Jacques]

I opened the web page of the other site with Frontpage and could see the
value (which change) of the hidden field. I thought that maybe there was a
URL for this field.

Jacques

 

[Murray]

So - tell me again what it is you are trying to accomplish?

It sounds to me like you want a hidden field on a page that you have on your
website to acquire the value assigned to a hidden field on some other
website (I am gathering it's not one you control?). Is that what you want?

If so, then I doubt that there is a way you could do that.

 

[Jacques]

Yes you think right, that's what I wanted to do.

Jacques

 

[MD Websunlimited]

Hi Jacques,

There are two ways to accomplish:

1. Create a web page that tears the page from the other site then parse that page for the hidden field. ASP using MSXML works real
well for this purpose or the IE browser object itself.

2. Create a 2 frame frameset where the one frame references the other site and the other frame references your site. Fix the sizes
so that only your frame is visiable. Next, use a JavaScript function to reference the other page and reference the hidden field.
Note: The other site may have code that prevents the loading of their page in a frame.

 

[Murray]

I am shuddering to think what damage one could do to ecommerce sites, and
other sites with this kind of approach.

 

[Thomas A. Rowe]

It is a good thing that MSXML requests can be blocked via ASP.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
==============================================
If you feel your current issue is a results of installing
a Service Pack or security update, please contact
Microsoft Product Support Services:
http://support.microsoft.com
If the problem can be shown to have been caused by a
security update, then there is usually no charge for the call.
==============================================

 

[Murray]

<nods>

--
Murray
--------------
MVP FrontPage

It is a good thing that MSXML requests can be blocked via ASP.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
==============================================
If you feel your current issue is a results of installing
a Service Pack or security update, please contact
Microsoft Product Support Services:
http://support.microsoft.com
If the problem can be shown to have been caused by a
security update, then there is usually no charge for the call.
==============================================

 

[MD Websunlimited]

How could this inflict damage on any site?

 

[MD Websunlimited]

Unless you do not allow a specific IP to reference your web pages and that IP is static, ASP or not, then there is no why to
restrict it that I'm aware of. If you know of a way please share the details.

Thanks,

 

[Murray]

By changing the contents of hidden fields, you could redirect mailings, or
alter account ID's or any number of malicious things.

 

[Thomas A. Rowe]

Mike,

I know of and am currently using a method that block any XML request to grab content from two
specific web sites. I learn part of the method by studying the server stat files.

I will not share this info, it is something that I provide to specific clients.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
==============================================
If you feel your current issue is a results of installing
a Service Pack or security update, please contact
Microsoft Product Support Services:
http://support.microsoft.com
If the problem can be shown to have been caused by a
security update, then there is usually no charge for the call.
==============================================

 

[MD Websunlimited]

That's the MVP sprit!

 

[MD Websunlimited]

If you're running an ecommerce site that uses hidden form values for those type of things then I don't need any of these methods.
Just by clicking Edit in IE, you can edit the form to suit your needs.

 

[Thomas A. Rowe]

There is no requirement of any MVPs or anyone for that matter share any code.

I make my living write custom ASP applications, you make you living selling add-ins, etc. and when
you were a MVP you pushed J-Bots, you never provided it free (in the spirit of being a MVP), when it
would have solve a user's problem.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
==============================================
If you feel your current issue is a results of installing
a Service Pack or security update, please contact
Microsoft Product Support Services:
http://support.microsoft.com
If the problem can be shown to have been caused by a
security update, then there is usually no charge for the call.
==============================================