last seen 1 year 48 weeks ago<div> <input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET" value="" /> <input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT" value="" /></div><script type="text/javascript"><!--var theForm = document.forms['aspnetForm'];if (!theForm) { theForm = document.aspnetForm;}function __doPostBack(eventTarget, eventArgument) { if (!theForm.onsubmit || (theForm.onsubmit() != false)) { theForm.__EVENTTARGET.value = eventTarget; theForm.__EVENTARGUMENT.value = eventArgument; theForm.submit(); }}// --></script> additional pages
Posted on: Tue, 12/19/2006 - 8:06pm
additional pages
alright so i was comparing someones page that has multiple pages of pictures to mine
and found this:
now im not much into html but i do understand some..can someone tell me anymore info about it..and can this lead us to find a way to hack around and get additional pages by adding pieces of this in our captions?
any ideas or am i just pulling something out of nothing? ;(
Okay now I'm getting you, well it's probably just the page number.
In some pages on myspace you'll notice it uses javascript and ASP to specify the next page.
So I'm guessing this is just there to specify the page, so unless it also passes the id and stuff through that form, I doubt it could be exploited.
But yeah, I only know baseline ASP.
Explanation of Postback :
http://www.xefteri.com/articles/show.cfm?id=18
Erm I don't think you'll get much from it =/
Here's an explanation of that code, it's not just html. It's html and javascript, working with ASP.net
From my basic knowledge of ASP.net I can tell you that this doesn't really have anything to do with private data.
The code is there for the server to use, it is using the postback function. Which cuts out validation on another script, and sends the form information to itself, to be validated and tinkered with.
The two hidden html tags at the top are generated by the javascript, and are there because it's the second phase, and ASP is seeing what submitted the form and stuff.
That may be wrong, I'm pretty sure on it though. Maybe someone else would have insight.
But yeah, I'm afraid that wouldn't really do you much good. It's a standard function on a lot of ASP scripts, so no exploits directly relating to myspace at least.
Metasyntactic.