php keylogger for my webpage

outcast7923

hi, i just got a free php-supportive site, and i have always wanted a keylogger just for the main page, so that i can see what others would be typing... can someone help me? i dont know php, so it will be really helpfull, i need something that can write numbers, special chars, and of course, letters... and then write all that to a text file on my server

p.s. i didnt get the free site because it supports php but because it gave me like, 125 megs

thnx! -outcast

planetsim

Firstly welcome to the forums.. as for your problem im not entirely sure what you want help with would you please explain a little bit more information will you be using a form? or is it just something a user will be typing etc in your webpage and you would like to capture the keystrokes?

outcast7923

i wanted something to just record the users keystrokes, then write it to a text file something that they wont know is there.

planetsim

You cant physically do it and if i went to a site that did that i would probably sue them over privacy issues. You could possibly use Javascript and put all keystrokes into a variable once the user goes else where send it via POST to create the file. However i do not suggeset you in doing this as you will need someway to do onunload which will be a popup if the user has left the site.

As for this being possible with PHP its not PHP is a server side language which cannot physcially interact with the browser.

drew010

its not possible in php because php is serverside and once the page is served up php is finished executing. its really not possible in js either since js is client side and couldnt write to a file. the only way you could do it is if you had javascript pick up the keys and manually submit a form to a php script that would write it to file. but it would take a lot of odd code and the user would notice something strange being done and they could view the source and see the js code that logs keys.

AstroTeg

I don't have time to write the code, but I think this is do-able. Although morally I think this is wrong.

Do a search for onkeypress or onkeydown. If you can't spend the time to write code, then check out irt.org for some coding examples in their JavaScript FAQs.

That solves the problem of getting the key pressed. Sending the data over to your server is another problem.

On approach would be to put in a hidden image. Say 1x1 pixel transparent gif as the default. Put it anywhere on the site. You know how image roll overs work? If not, look it up. Notice the code for the rollover involves replacing the src= with a URL to another image? Replace that with your PHP script and pass the key press(es). Notice that when you do this, this all takes place in the background of the borwser. Meaning the user doesn't have to hit submit on anything. Its slick, but you may actually kill your PHP script if you have a lot of people hitting your page and typing a lot of stuff in.

planetsim

Well yes of course its doable with Javacript but not everyone who visits the site will have javascript enabled. Also if you dont have a privacy statement of some kind explaining exactly why or what your doing with this information and someone finds out do expect to get into some trouble a simple view source will get any user that has a little jscript knowledge to find out exactly what you have done.

Weedpacket

And don't forget mouse clicks, cut-and-paste,... and hiding from the user the fact that everything they do generates network traffic. But I'd be curious as to why you'd want to take what sounds like an unhealthy interest in what they're doing.