Ajax and JavaScript Exploiting
You may be aware of website-codes.com if not let me tell you. The idea of it was to provide php scripts that could run from any webhost that didn’t have php support. How I would achieve this would be through a line of JavaScript that user would put on their site. Well the website has been put on hold as I haven’t found time to code it.
Well anyway because I’ve been doing a lot of Ajax and JavaScript coding for where I work it had me thinking. If you could get Ajax to work on any webhost with only putting one line of code on their site? Well sure enough you can. I did a bit of testing there and then and it worked 100%. I couldn’t believe it. Because with JavaScript you can literally change the whole look and feel of a webpage, if you think hard enough you can see how this can be very dangerous to people’s websites. One thing that comes straight to mind is that you can use this one line of code to turn a whole page into a login page look-a-like (phishing) I now see why many public pages don’t allow JavaScript. E.G. MySpace.


Comments(0)