NamePros.Com (http://www.namepros.com/)
-   CODE (http://www.namepros.com/code/)
-   -   Form security script (http://www.namepros.com/code/416047-form-security-script.html)

music_man 01-09-2008 01:26 AM

Form security script
 
Hi,

This is an onscreen keyboard written in js to help against keyloggers.

http://williamparry.com/scripts/formSecurity/index.html

Feedback appreciated.

Cheers

DeViAnThans3 01-09-2008 04:20 AM

Looks nice! For sites which require or want a high security, this could be quite suitable!

What I'ld do additionally, is making sure that people can't type anything in there (onkeypress javascript). Or are at least warned that they should use the onscreen keyboard for their own safety. :)

Note though that this form of security only can handle keyloggers. Network sniffers will still find the information very easily. :)

maximum 01-09-2008 08:10 AM

William, thanks for sharing. Nice idea :tu:
Originally Posted by DeViAnThans3
....
What I'ld do additionally, is making sure that people can't type anything in there (onkeypress javascript). Or are at least warned that they should use the onscreen keyboard for their own safety. :) ....

Good idea to add this, IMHO.
Originally Posted by DeViAnThans3
Looks nice! For sites which require or want a high security, this could be quite suitable!
....
Note though that this form of security only can handle keyloggers. Network sniffers will still find the information very easily. :)

Wouldn't such be smart to be using SSL, etc., as part of the site's overall "high" security? ;)

gamescoper 01-09-2008 11:58 AM

great script brilliant idea for online banking as well and if you can set it that the user cannot change the security level even better

music_man 01-09-2008 11:59 AM

Thanks for the feedback!

Your right that it doesn't prevent network sniffing, but as maximum said, SSL should cover that (and SSL encryption is better than any JS encryption).

gamescoper - it was originally designed to have the security setting set only by webmaster but I thought that if the user wants something easier to use (but less secure) then they can set it themselves.

Perhaps I should add a variable in the embed script that states whether the user can set their own security?

Cheers

William

xrvel 01-09-2008 07:33 PM

Nice script.
I tried to resize my browser and the 'keypad window' still on the top right part of my browser:tu:

Kurniawan.


All times are GMT -7. The time now is 06:57 PM.
Site Sponsors
Advertise your business at NamePros

Powered by: vBulletin Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 2.4.0