Hide javascript from client? i think i've done it!

[Nelson Campos]

Hello all,

I belive i found a way to hide javascript from the client.. i use php.. page referral and sessions to restrict access, run the code and then run a fake code to clean the script file.

I've already done some tests and didn't found a way to view the javascript code.

if anyone want's to give it a try, i made a testpage just for that purpose: http://prtg.eu/lockedscript/testpage/

on the scriptfile i have a line that says:

// Here is the code you need to proof you where here --> ######

if you can view the script, tell me that code and how did you found your way around the protection to view the script.

[Dormilich]

that one?

/// ACCESS Granted http://prtg.eu/l// JavaScript Document
// ########################################
// # #################################### #
// # # lockedscript 1.0 # #
// # ######################################
// # # Programer: Nelson Campos # #
// # # Mail: thessnake@gmail.com # #
// # # Website: www.prtg.eu # #
// # ######################################
// ########################################
// Now if you can see this than you found a way around this lock..
document.write('<br />');
document.write('Can you find my script? i\'m around here somewhere!');
document.write('<br />');
// Here is the code you need to proof you where here --> 085609

FireBug > Script > lockedscript.ph p

[Nelson Campos]

any particular configuration on firebug? i have firebug too and it doesn't show the script..

[Dormilich]

probably a combination of previously inactivated Javascript, empty cache, first visit and luck.

[Nelson Campos]

i found some problems in the session vars wich are not working has supposed.. for the moment any tests made on the website might not work.. when i correct that ill post here again ather implement better security

[Nelson Campos]

new security setting have been implemented, including a bug that has been solved on IE..

Dormilich: would you like to try and mimic that last shoot?

everyone else can try access the javascript file and tell how and give the new proof code

[tomvertommen]

/// ACCESS Granted http://prtg.eu/l// JavaScript Document
// ########################################
// # #################################### #
// # # lockedscript 1.0 # #
// # ######################################
// # # Programer: Nelson Campos # #
// # # Mail: thessnake@gmail.com # #
// # # Website: www.prtg.eu # #
// # ######################################
// ########################################
// Now if you can see this than you found a way around this lock..
document.write('<br />');
document.write('Can you find my script? i\'m around here somewhere!');
document.write('<br />');
// Here is the code you need to proof you where here --> 0632609/2