java in HTML page help me understand.

[SBSP]

The Java Side

Code: Select all

<script language=JavaScript type="text/javascript">
{
var a="null";
function check()
{
if (document.a.c.value == a)
{
document.location.href="/"+document.a.c.value+".htm";
}
else
{
alert ("Try again");
}
}
}
</script>

The HTML Side.

Code: Select all

<form name="a" action="javascript:check()">
<input type="text" name="c" maxlength="25" size="16"><br>
<br>
<input type="submit" value=" Log In ">
</form>

Both the above sections is in index.htm

The form side i understand.
It consist of the form which is referred to as "a" and text box inside the form which is referred to as "c"
with the submit button which is the validation of the form's text box

When pressing the submit button of the form it calles the "Java function" called "check"

Now.

Code: Select all

document.a.c.value == a

document -- What is document what does it refer to ?
.a -- The form ?
.c -- The Textbox ?

is it saying
if the textbox value "c" in Form "a" has the string/value of "a" typed in the box then
document.location.href="/"+document.a.c.value+".htm";

or else

alert ("Try again"); whicj is a message box.

?

Edit

Will the string value result of
document.location.href="/"+document.a.c.value+".htm"

be "/a.htm" ??

[RuadRauFlessa]

first thing you need to understand is that it is not Java but JavaScript. Java on Websites is Server Side not client side and is actually JSP (Java Server Pages) done with the J2EE framework.

Now your assessment is actually correct.
document is the current document as in the index.html file or rather the current document in which the script is located. a and c both are variables or rather objects within the document. So the parent object is document and then you have a child of document named a which is of type form and a child named c which is a text box. c is contained within a and a in document. So document.a.c.value references the value of the text field within the form a in the current document/page. That script is actually a bit daft as document.a.c.value should never be equal to a form which is a and I don't see any other a declared anywhere. The a it references is also not a string so it won't do a string comparison to check if the value of document.a.c is a string with the value of 'a'

[maxxis]

Are trying to do a login page with Javascript to hand the login?

If so then abandon the idea and rather look into SESSIONS please.

[SBSP]

Are trying to do a login page with Javascript to hand the login?

If so then abandon the idea and rather look into SESSIONS please.

No I'm just messing about on this site.
http://www.hack-test.com/index.htm

[RuadRauFlessa]

Are trying to do a login page with Javascript to hand the login?

If so then abandon the idea and rather look into SESSIONS please.

ROFL I am thoroughly convinced that it is purely academic.

[SBSP]

Ok But why if i type a in the box it jumps to
alert ("Try again"); in the if statement ?

[RuadRauFlessa]

What are you typing in the box

[SBSP]

im typing

a

[RuadRauFlessa]

Put quote marks around the a in the code like this

Code: Select all

if (document.a.c.value == "a")

And see what happens

[SBSP]

instead of that i just replaced

Code: Select all

alert ("Try again");

with

Code: Select all

document.location.href="/"+document.a.c.value+".htm";

So regardless of what you type it should got to

a.htm

I wil try your way and let you know.

Edit Yup! it works.

But http://www.hack-test.com/a.htm doesnt exist

[RuadRauFlessa]

instead of that i just replaced

Code: Select all

alert ("Try again");

with

Code: Select all

document.location.href="/"+document.a.c.value+".htm";

So regardless of what you type it should got to

a.htm

I wil try your way and let you know.

Edit Yup! it works.

But http://www.hack-test.com/a.htm doesnt exist

If you do that it will only go to a.htm if you type a

[SBSP]

yea i know or b.htm if i type b ect ect.

I guess the website doesnt work.

[RuadRauFlessa]

Like I said there is no variable a in the script. So when you first use it it will automatically be created by the interpreter. Problem being that it will still have no value as it will point to a piece of uncleared memory and will also be of an undefined data type. Either add

Code: Select all

var a = "a"

somewhere or change the check to read

Code: Select all

if (document.a.c.value == "a")

[SBSP]

I have i changed it to if whatever == "a" the "if" statement works fine.

I'm not really interested in the code and getting the If statement to work correctly.

I want to see whats behind http://www.hack-test.com/index.htm's password box
http://www.hack-test.com/index.htm is not my site its supposed to be a "hack" test.

Wanted to see if i can get past level one.

Edit:

Bleh according to me i hacked them

I won SBSP 1
http://www.hack-test.com/index.htm 0

[RuadRauFlessa]

Lol the password is "null"

Didn't see the deceleration

[SBSP]

Lol the password is null

Really ?
LOL ok i lose

It is in deed! well done

[RuadRauFlessa]

Lol the password is null

Really ?
LOL ok i lose

It is in deed! well done

lvl2 has the below script

Code: Select all

<script language="JavaScript" type="text/javascript">
var pass, i;
pass=prompt("Please enter password!","");
if (pass=="l3l") {
window.location.href="./"+pass+".htm";
i=4;
}
</script>

lol too easy

[SBSP]

Yes 131 doesnt work ?

[RuadRauFlessa]

Yes 131 doesnt work ?

not 131 l3l

[SBSP]

You got to be Kidding Me!!!

Level 4 is easy

[RuadRauFlessa]

You got to be Kidding Me!!!

Nope

[SBSP]

Ok but that doesnt count if it was "bob gates" or somethig i wouldive got it

Edit to get to level 5 the link on level 4 points to sdrawkcab.htm

But the browsers is processing the code, So i take it i need to use telnet to download the page to get to view the page source code. ?

[RuadRauFlessa]

You got to be Kidding Me!!!

Level 4 is easy

What about Level 7

[SBSP]

Ok Level 7 with Username and Password.

The Username and password value gets passed on to XXd2.php.
But the PHP part of XXd2.php is procceed on the server ?
So there is no way you can get php code ?

[DarkStar]

Okay, I'm stuck on level 7

Any hints? (Please refrain from giving the answer away for me)

*EDIT*
Nevermind, I figured it out