ILayer Data Capture

PaceLattin

Banned
May 4, 2010
147
2
0
Anyone know of a way to capture data put into a form? I've heard a rumor there is a way perhaps with an ilayer? If this is true, anyone know of a way to prevent it? Got a contract that said we must not "use a method to capture data" from the third party form of the client.

Did a little thinking, and an Ilayer seems an easy way, unless you want to use some sort of sniffer. Seems should be a way to use a JS to block that ilayer?

Thoughts from anyone with a little grey in their hat?
 


the form posts to a 3 party site? should be easy to just use ajax and silently post the data to your site whenever they unfocus a text box.
 
i meant actually capturing frmo a third party site, when maybe the site is framed, and then using a layer... just curious since somene mentioned it.
 
oh, when iframed. yeah..in that case, there definitely shouldnt be any way to do that if they're actually entering in data at the real website. otherwise you'd have fraudsters iframing online banking pages to collect data.
 
oh, when iframed. yeah..in that case, there definitely shouldnt be any way to do that if they're actually entering in data at the real website. otherwise you'd have fraudsters iframing online banking pages to collect data.

There would be no reason for fraudsters to do this since phishing works just as well and is a whole lot simpler.
 
There is no way unless you can sneak a js file on to that form page.
mission-impossible.jpg
 
Cant you use the JS to block the ability however? ie remove the frame all toghether, no
Seriously, talk with your technical staff.

Anyway, if you're looking to prevent your affiliates from capturing the data that users enter into a merchant's form, that's already being done for you. No way for them to intercept it. Basic cross-site-scripting protections.

Now jeez, go talk to your technical staff. Or that nerdy intern down the hall.
 
What! your not banned yet? Whats going on with the ban thread guys?