Javascript in address bar

[alexgeek]

Marc posted about using javascript straight from the address bar.
Do you think using this method you can send someone to a page with your own JS attached to it?

Just a though

[Rakuli]

Well you can access a query string with javascript so technically you could run the querystring through the function eval() and run the code on it.

It would be up to the page you're visiting though not *just* what's in the address bar.

[alexgeek]

Could you show me a very basic example when you have time please?

[Rakuli]

Okay something like this.

I want to run this script when the new page loads:

alert("Hello, you must be pretty cool for this page to say hello");

so encode it as a url passable string

Code: Select all

var cde = encodeURIcomponent('alert("Hello, you must be pretty cool for this page to say hello");');

// send the user to where the script will be read

window.location.href = "index.html?javascript=" + cde;

Then in the page to run the script you could use something like

Code: Select all

// Use javascripts version of the PHP explode function on the search property of LOCATION which has the query string

var dtls = location.search.substring(1,location.search.length).split('&'); // split at the & signifying the separator.. the offset of 1 gets rid of the question mark
var nmeNcde = dtls[0].split('='); // split the value from the name

var cde = decodeURIcompnent(nmnNcde);// convert back to normal string

// run the code
eval(cde)

// You should get a message

[alexgeek]

Thanks, I'll try this out later, off out now!

+ rep!