javascript - ajax POST handler looping -

-

i'm trying setup basic ajax submit handler modify form (i'm writing lesson on csrf vulnerabilities), page keeps looping. here's example code i've been tinkering with, based off http://api.jquery.com/jquery.post/:

 <!doctype html>  <html>  <body>   <form id="hidden_form" target="blahblah.com"> </form>   <script>  //attach submit handler form  $( '#hidden_form' ).submit(function( event ) {        //stop form submitting       event.preventdefault();        //set new target form       var $form = $( ),         url = "http://192.168.101.250/mutillidae/index.php?page=add-to-your-blog.php&csrf-token=securityisdisabled&blog_entry=example+text&add-to-your-blog-php-submit-button=save+blog+entry"        //capture response nothing       var posting = $.post( url );  });  </script>   <script>       $( '#hidden_form' ).submit();  </script>   </body>  </html>

when load file locally browser, tab label switches between /path/to/file.html , "connecting" fast, know request never gets sent out because have burp proxy intercepting traffic , it's not capturing anything.

so doing wrong? want ajax handler send post request url specified, never gets sent out

edit: i've changed second script call handler instead of actual form, there's still no traffic sent on wire?

calling .submit() directly on form element node not trigger submit event, instead, directly submits form bypassing event handlers. should instead call jquery form of method trigger event handler.

$( '#hidden_form' ).submit();

Comments

Post a Comment

Popular posts from this blog

yii2 - Yii 2 Running a Cron in the basic template -

-
i have seen instructions on running cron in advanced template, cant figure out how on basic template. have following controller in basic controllers folder. <?php namespace app\controllers; use yii\console\controller; /** * cron controller */ class croncontroller extends controller { public function actionindex() { echo "cron service runnning"; } public function actionmail($to) { echo "sending mail " . $to; } } i have navigated root of application , tried these comands yii cron php yii cron im getting unknown comand "cron" i know old question failed find actual answer this. if @ code yii exec file you'll notice requires /common/config/aliases.php file console/config/main.php. can naturally change these or copy on these advanced template. hope solves problem wanting same thing.
Read more

asp.net - 'System.Web.HttpContext' does not contain a definition for 'GetOwinContext' Mystery -

-
i realize question might seem trivial some, it's these types of things find myself fighting quite bit , want make sense of despite seeming losing battle in .net (for me anyway). so, if following: using system.web; ... applicationuser user = system.web.httpcontext.getowincontext().getusermanager<applicationusermanager>().findbyid(system.web.httpcontext.user.identity.getuserid()); that produces error in title , red getowincontext() , error cannot resolve symbol 'getowincontext()' however, if following (remove system.web in front of httpcontext ), works expected (or @ least no errors): using system.web; ... applicationuser user = httpcontext.getowincontext().getusermanager<applicationusermanager>().findbyid(system.web.httpcontext.user.identity.getuserid()); however, if (same line that's working using system.web commented out): //using system.web; ... applicationuser user = httpcontext.getowincontext().getusermana...
Read more

mercurial graft feature, can it copy? -

-
there new feature in mercurial 3, called 'graft' (graft local). job of moving change-set different branch. is there way "copy" change-set branch? i interested in in moving stuff qa branch production branch, still need code reside in qa. want copy. found , have tried few things, maybe it'll become clear more tinkering , reading... does have better way of 'cherry picking' change-sets move cross branch (or trunk)??? graft copies changesets, doesn't move them. hg graft (emphasis mine): this command uses mercurial's merge logic copy individual changes other branches without merging branches in history graph. known 'backporting' or 'cherry-picking' . default, graft copy user, date, , description source changesets.
Read more