Form security script

music_man · 01-09-2008, 02:26 AM

Hi,

This is an onscreen keyboard written in js to help against keyloggers.

http://williamparry.com/scripts/formSecurity/index.html

Feedback appreciated.

Cheers

DeViAnThans3 · 01-09-2008, 05:20 AM

Looks nice! For sites which require or want a high security, this could be quite suitable!

What I'ld do additionally, is making sure that people can't type anything in there (onkeypress javascript). Or are at least warned that they should use the onscreen keyboard for their own safety.

Note though that this form of security only can handle keyloggers. Network sniffers will still find the information very easily.

maximum · 01-09-2008, 09:10 AM

William, thanks for sharing. Nice idea

Originally Posted by DeViAnThans3

....
What I'ld do additionally, is making sure that people can't type anything in there (onkeypress javascript). Or are at least warned that they should use the onscreen keyboard for their own safety.

....

Good idea to add this, IMHO.

Originally Posted by DeViAnThans3

Looks nice! For sites which require or want a high security, this could be quite suitable!
????: NamePros.com http://www.namepros.com/code/416047-form-security-script.html
....
Note though that this form of security only can handle keyloggers. Network sniffers will still find the information very easily.

Wouldn't such be smart to be using SSL, etc., as part of the site's overall "high" security?

gamescoper · 01-09-2008, 12:58 PM

great script brilliant idea for online banking as well and if you can set it that the user cannot change the security level even better

music_man · 01-09-2008, 12:59 PM

Thanks for the feedback!

Your right that it doesn't prevent network sniffing, but as maximum said, SSL should cover that (and SSL encryption is better than any JS encryption).

gamescoper - it was originally designed to have the security setting set only by webmaster but I thought that if the user wants something easier to use (but less secure) then they can set it themselves.

Perhaps I should add a variable in the embed script that states whether the user can set their own security?

Cheers

William

xrvel · 01-09-2008, 08:33 PM

Nice script.
I tried to resize my browser and the 'keypad window' still on the top right part of my browser

Kurniawan.

01-09-2008, 02:26 AM	THREAD STARTER #1 (permalink)
music_man NamePros Member Join Date: Jun 2005 Location: New Zealand Posts: 95	Form security script Hi, This is an onscreen keyboard written in js to help against keyloggers. http://williamparry.com/scripts/formSecurity/index.html Feedback appreciated. Cheers __________________ Self-service My homepage

01-09-2008, 12:59 PM	THREAD STARTER #5 (permalink)
music_man NamePros Member Join Date: Jun 2005 Location: New Zealand Posts: 95	Thanks for the feedback! Your right that it doesn't prevent network sniffing, but as maximum said, SSL should cover that (and SSL encryption is better than any JS encryption). gamescoper - it was originally designed to have the security setting set only by webmaster but I thought that if the user wants something easier to use (but less secure) then they can set it themselves. Perhaps I should add a variable in the embed script that states whether the user can set their own security? Cheers William __________________ Self-service My homepage

01-09-2008, 08:33 PM	#6 (permalink)
xrvel i love automation Join Date: Nov 2007 Location: xrvel.com Posts: 1,620 Follow @xrvel	Nice script. I tried to resize my browser and the 'keypad window' still on the top right part of my browser Kurniawan. __________________ Xrvel \| Free Wordpress Plugins \| Desain \| Bodoh \| WP License

01-09-2008, 05:20 AM	#2 (permalink)
DeViAnThans3 Account Closed Join Date: Apr 2006 Location: Belgium Posts: 442	Looks nice! For sites which require or want a high security, this could be quite suitable! What I'ld do additionally, is making sure that people can't type anything in there (onkeypress javascript). Or are at least warned that they should use the onscreen keyboard for their own safety. Note though that this form of security only can handle keyloggers. Network sniffers will still find the information very easily.

01-09-2008, 12:58 PM	#4 (permalink)
gamescoper NamePros Member Join Date: Jan 2008 Posts: 138	great script brilliant idea for online banking as well and if you can set it that the user cannot change the security level even better

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)