Tuesday, September 28, 2004

JScript Anti Spoof

Jscript commands to try to identify the actual URL for the current Web site

Use a JScript command in Internet Explorer. In the Address bar, type the following command, and then press ENTER:

javascript:alert("Actual URL address: " + location.protocol + "//" + location.hostname + "/");


Caution Use caution when you type script directly in the Address bar. Script that you type directly in the Address bar can take the same actions on the local system as the user who is currently logged on.

The JScript message box shows the actual URL Web address for the Web site that you are visiting.

You can also copy the following JScript code and paste it in the Address bar for a more verbose description of the Web site URL:

javascript:alert("The actual URL is:\t\t" + location.protocol + "//" + location.hostname + "/" + "\nThe address URL is:\t\t" + location.href + "\n" + "\nIf the server names do not match, this may be a spoof.");


Compare the actual URL with the URL in the Address bar. If they do not match, the Web site is likely misrepresenting itself. In this case, you may want to close Internet Explorer.
" Its safe n fun, try it out ! "

No comments: