Just to clarify, the detection code below detects that Firebug's
console is enabled, not that Firebug is installed or active.

jjb

On Jun 14, 8:16 am, Peter Valdemar Mørch <[email protected]> wrote:
> yogesh wrote:
> > I need to disable firebug for my html page as I am using a hidden
> > input filed to save the score and then submit it. Firebug allows the
> > user to edit the score before submitting. Is it possible to disable
> > firebug for such page?
>
> The root problem seems to be that you are trusting the client not to
> modify the hidden input field.
>
> You may not be able to prevent firebug, but you could use some
> javascript onsubmit() handler to detect if firebug is running, and
> refuse to submit if it is. Detection could work e.g. like this:
>
>      if (window.console && window.console.firebug) {
>          // do something if firebug
>          alert("Firebug running");
>      }
>
> This of course could also be subverted... (The user could possibly
> remove window.console.firebug or redefine your onsubmit handler or...)
> You won't be able to prevent a client from sending you bogus submits if
> he is determined enough. There are 1089734 other ways than firebug he
> could use and some you won't be able to detect at all.
>
> Peter

-- 
You received this message because you are subscribed to the Google Groups 
"Firebug" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/firebug?hl=en.

Reply via email to