Jump to content

Obfuscating "hidden" fields from view source


btw_nc

Recommended Posts

OK, it's an HTML form on a page that can use PHP.
That's still not exactly clear.  Do you have the ability to change the PHP that creates the HTML form or not?

 

If you can change the PHP, you can insert some of these form fields using obfuscated javascript, as mentioned.

 

there's no way the data in the hidden fields can be concealed from a casual observer, is there?
Depends on the definition of "casual."  Hidden form fields are concealed from 90% of the population.  Hidden form fields injected in JavaScript are hidden from 95% of the population.

 

-Dan

If you can change the PHP, you can insert some of these form fields using obfuscated javascript, as mentioned.
That still applies.  if you have the ability to change the file that actually displays the form, you can change these hidden inputs into javascript calls that inject the inputs into the form.
cURL should work OK. Tnx for input.
cURL has nothing to do with this conversation at all.  cURL is a server-side function in PHP.  It does not run on the client, and will not help you obfuscate HTML form elements.

 

What are you actually trying to do?

My form > someone else's processing script

 

Only problem is, I need to include 3 static hidden fields when the form is submitted:

 

My form > intermediate page with cURL which, in addition to the $_POST fields, adds the required hidden fields and submits the data > someone else's processing script

 

 

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.