Old 29th August 2005, 03:33   #1
X-Acid-Burn-X
Junior Member
 
Join Date: Aug 2005
Posts: 2
Java script & secureing it down

i got this script to work with java but it needs secureing down couse it shows the password

code:
<script type="text/javascript">
function loadXML()
{
var xmlDoc=new ActiveXObject("Microsoft.XMLDOM")
xmlDoc.async="false"
xmlDoc.load("http://youriport/admin.cgi?pass=yourpass&mode=viewxml&page=1")
nodes=xmlDoc.documentElement.childNodes
document.getElementById('a1').innerText=nodes(7).text
document.getElementById('a2').innerText=nodes(8).text
}
</script>


& to call it in the html
code:
<span id="a1"></span>
<br>
<span id="a2"></span>

X-Acid-Burn-X is offline   Reply With Quote
Old 29th August 2005, 06:53   #2
NJK
FRYSK BLOED TSJOCH OP- FRISIAN
 
NJK's Avatar
 
Join Date: Sep 2003
Location: a real Frisian hometown
Posts: 15,393
don't want to start anything but this is in no way related to the shoutcast tech support that is given here.

you need to turn to a java support forum.

Each Thursday a new show on Celtica Radio with Darkwave music.

Nope, it's not a radiostation just a non stop darkwave music stream

WINAMPSHOUTCAST
NJK is offline   Reply With Quote
Old 29th August 2005, 08:01   #3
X-Acid-Burn-X
Junior Member
 
Join Date: Aug 2005
Posts: 2
sorry i didn know where to post
X-Acid-Burn-X is offline   Reply With Quote
Old 29th August 2005, 13:24   #4
Wavestreaming
Major Dude
 
Wavestreaming's Avatar
 
Join Date: Apr 2004
Location: United Kingdom
Posts: 1,563
Send a message via AIM to Wavestreaming Send a message via Yahoo to Wavestreaming
Try google for javascript encoders
Wavestreaming is offline   Reply With Quote
Old 29th August 2005, 14:43   #5
ravetrax
Major Dude
 
ravetrax's Avatar
 
Join Date: Apr 2003
Location: Clearwater, FL ~~~~~~~~~~~~~~~ My name is Rava www.ravetrax.com
Posts: 541
Send a message via ICQ to ravetrax Send a message via AIM to ravetrax Send a message via Yahoo to ravetrax
using javascript in general is very unsecure. can you use php, and at least authenticate the user before providing the info?

Echo34 - A music related irc network for the socially challenged. [ website | chat now ]

Stream Solutions - The next level of Shoutcast server hosting! [ website | forums ]

RaveTrax - Its not a state of mind, Its a way of life. [ website | forums | chatroom ]
» Gen2 A/V Streams - NSV Video [vp6.2 & 64k aacPlus v2] - 64k aacPlus v2 - 24k aacPlus v2
» AMPX Player - Web based player that plays ALL streams! [Audio & Audio/Video]
» Other Streams - 160k MP3 - 64k MP3 - 24k MP3
ravetrax is offline   Reply With Quote
Old 29th August 2005, 22:31   #6
CraigF
Passionately Apathetic
Administrator
 
CraigF's Avatar
 
Join Date: May 2000
Location: Hell
Posts: 5,435
by using the above code, you are basically giving everyone your admin password.

you must do these things on the server side, not the client side. otherwise you're giving out your info, encrypted or not. simple packet sniffing would reveal the plaintext http request.

CraigF is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Shoutcast > Shoutcast Technical Support

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump