[RESOLVED] Form Variable encryption

[Kriil]

I've searched and searched forums for about 2 hours and still can't find the answer to my question. Some are close but not quite what I need.

I have a form which submits data using method="GET"

This of course appends the form keywords and values to the end of the URL. Now I know GET isn't secure, but I don't really care about security. I just don't want my users to see the password they just typed in in the URL. An illusion of security is all I need. The site doesn't provide content that needs to be secure, so no big deal.

First of all don't say use POST, that was one fo the first things i tried, and I got the lovely message that my server doesn't support POST data. I know....very strange, but never-the-less that's the way things are.

Is there a way to take the data that was entered on the form and when the submit button is hit, encrypt or hide the data so that it doesn't appear in the URL?

Thanks for any help on this. I'm thinking it isn't possible, but someone please prove me wrong.

[maxpup979]

just run the form through a javascript encryption function before it is passed on to the next page...even if you dont do real encryption, you could easily do a charachter shift or the like to meet your needs.

[Kriil]

Let me take a crack at this and you tell me if I'm right.

for my submit button i would set the onclick attribute to "return encrypt()"

then my encrypt() function would use

document.formname.inputname.value = modifiedvalue;

where modified value would be whatever method I used to "encrypt" the value.

Then when the form is submitted it will submit it with the modified values?

[maxpup979]

Sounds good to me. for a quick and dirty public domain rot13, take a look at
http://tools.geht.net/rot13.html

and for extra security, maybe even double rot13!

hehehe

[Kriil]

LOL, horribly insecure, but a very effective solution. Exactly what I needed.

Thanks maxpup

-kriil

[LoganK]

So are you going with the double rot13? 😃