right, and it's not a good idea to have it that way, that's like i see these people use a set un & pw in flash and all you have to do is download the swf and decompile it and there it is.
While it might be hard for someone to figure out, I wouldn't concider it "proper" coding practice, on somethings its ok but not on a login feature. Not that I am one to preach about "proper coding practices". ~Dave the disruptor~ ---------------------------------------- From: Joe Rinehart <[EMAIL PROTECTED]> Sent: Wednesday, May 25, 2005 11:07 AM To: CF-Talk <[email protected]> Subject: Re: CFFORM + FLASH Stuart, You're passing the user's correct password to the clientside - someone will figure out how to sniff it, it's not hard to open up Flash... -Joe On 5/25/05, Stuart Kidd wrote: > Hi Dave, > > Thanks for that, that's perfect. > > Can I ask why it may come back and bite me in the ass so that maybe I can > fix it? > > Cheers, > > Saturday > > > On 25/5/05 01:45, "dave" wrote: > > > for one you are trying to be sneaky with the password variable which of > > course > > can/will/shall come back to bite you in the ass. > > > > but, since this is what you are doing why not add some .as script to the > > filed just like you did with pw filed? > > onsubmit="if( numberOfReplies.text != '-------------------' ) > > alert('please select an email option'); return false;�> > > > > ~Dave the disruptor~ > > > > ---------------------------------------- > > From: Stuart Kidd > > Sent: Tuesday, May 24, 2005 4:57 PM > > To: CF-Talk > > Subject: CFFORM + FLASH > > > > Hi guys, > > > > I�m using the CFFORM tag and wanted to add some extra validation. > > > > My tag is like so: > > > > action = "/?kissMyDate=yes" > > format = "Flash" > > skin = "haloBlue" > > width = "400" height="420" > > name="Part1" > > onsubmit="if( password.text != '#GetUser.password#' ) { > > alert('Password is incorrect'); return false;}�> > > > > I added the password validation and that worked no problem, but now I�d like > > to make sure that a user always makes a selection from a combo box and NOT > > choose the value which is �� ( > > value="">-------------------). > > > > value="#GetAdvert.numberOfReplies#" selected>Currently: > > #GetAdvert.numberOfReplies# > > ------------------- > > 5 > > 10 > > 25 > > Unlimited > > No more, I've had enough! > > > > As it stands if the user chooses > > value="">------------------- the form doesn�t have an error pop up. > > > > I thought of either doing some javascript in the cfselect or possibly adding > > something to the tag similar to the onsubmit. > > > > action = "/?kissMyDate=yes" > > format = "Flash" > > skin = "haloBlue" > > width = "400" height="420" > > name="Part1" > > onsubmit="if( password.text != '#GetUser.password#' ) { > > alert('Password is incorrect'); return false;} > > onsubmit="if( numberOfReplies.text != '' ) { alert('Please choose > > max emails to receive'); return false;}�> > > > > Unfortunately the above comes up with an error. > > > > If anyone could help it would be greatly appreciated. > > > > Thanks, > > > > Saturday > > > > > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:207699 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
