|
| Submitted on: |
8/2/2001 11:35:53 AM |
| By: |
Vikas Kumar
|
| Level: |
Advanced |
| User Rating: |
By 4 Users |
| Compatibility: |
ASP (Active Server Pages), HTML, VbScript (browser/client side)
|
| Views: |
10512 |
|
|
|
|
|
The Second question to my challenge
program
|
| |
Terms of Agreement:
By using this article, you agree to the following terms...
- You may use
this article in your own programs (and may compile it into a program and distribute it in compiled format for languages that allow it) freely and with no charge.
- You MAY NOT redistribute this article (for example to a web site) without written permission from the original author. Failure to do so is a violation of copyright laws.
- You may link to this article from another website, but ONLY if it is not wrapped in a frame.
- You will abide by any additional copyright restrictions which the author may have placed in the article or article's description.
|
The Second question to my challenge
program
(I am still waiting for more responses to my first
question I will be posting the results next week. I got quite a few responses
but i am hoping for quite a few more. So keep writing)
Now onto todays question
See the code posted by George Leithead at the link
below
http://www.planet-source-code.com/xq/ASP/txtCodeId.2323/lngWId.2/qx/vb/scripts/ShowCode.htm
(How to protect your script. Submitted on: 7/26/2001
4:25:44 PM By: George Leithead )
There are some obvious flaws in this code.
There are a
no of ways by which one can till access the js files
what are
these ways and how will you solve them
Interesting to note he has
opened doors to a less used feature of HTTP_REFERER.
I will be asking more
interesting questions about this in some later challenges
|
|
Report Bad Submission
|
Your Vote
|
| |
Other User Comments
|
 8/14/2001 3:15:20 PM: Andrew Erwin
I have already answered this question once, but here it goes again.
Anything that is seen by the client is also saved on the client machine.
One way to see this is to look at your cache directory... Another, easier way is to go to File, Save As in the menu bar of your browser.
These applies to "Right Click Protected" content as well. You cannot see anything that you did not download first! Processing, and decisions regarding what you see are made on the server (at least when using server-side scripting) but the actual content is downloaded, then executed on your browser...
(If this comment was disrespectful, please report it.)
|
8/19/2001 1:18:51 PM: ifdef
slightly harder to crack...
include an asp file which has a JavaScript variable in. (src=
(If this comment was disrespectful, please report it.)
|
8/20/2001 3:27:51 PM: Andrew Erwin
No, actually, if you include an asp file with client side script, it is just as easy to get by SAVEing the file AS something on your computer. (File...Save As)
Again... ANYTHING that is client side must be executed on the client machine!
That means you download it, and your browser does the interpreting. When you include it in an asp file, the IIS machine will run it against asp.dll to process anything that is written in asp, however, client side code (html, vbscript, javascript) is sent to the client raw.
(If this comment was disrespectful, please report it.)
|
8/29/2001 9:01:16 AM: MS
Protect your scripts: Do not let anyone access them :-)
(If this comment was disrespectful, please report it.)
|
8/29/2001 9:01:25 AM: MS
Protect your scripts: Do not let anyone access them :-) Just set the read/write permission off
(If this comment was disrespectful, please report it.)
|
11/21/2001 2:57:45 AM: Sam Moses
Dude, You are asking questions in the wrong place. You can't post a question and list it as a tutorial. If you want to ask questions, you are going to need to go to the message board.
(If this comment was disrespectful, please report it.)
|
12/20/2004 11:30:29 AM: Andre Rembert
yeah i agree with sam, not only do the questions suck, but they're not even real challenges. if you want to do something useful on psc, why not post the original code with your edits to show where he may've made a mistake.
(If this comment was disrespectful, please report it.)
|
1/4/2008 6:40:29 AM: anuj
good
(If this comment was disrespectful, please report it.)
|
Add Your Feedback
Your feedback will be posted below and an email sent to
the author. Please remember that the author was kind enough to
share this with you, so any criticisms must be stated politely, or they
will be deleted. (For feedback not related to this particular article, please
click here instead.)
To post feedback, first please login.
|
