Printable View
Hello all,
I have a small question that could use your help...
I am trying to hide html code that is on a webpage from being viewed through the source code viewer in IE or any browser...
for instance,
<bgsound src="http://www.mysite.com/something to display.xyz" loop="infinite">
or <body> something something </body>
could this be hidden from someone who would (in IE)do: view->source...
Could someone tell me if it is possible or not and how you would do it?
thanks in advance
cmd
There is a way, but it is definately not fail-safe. It can only prevent beginners and stuff like that. Anyway here's the code:
<Script language="JavaScript">
<!--
z="the text that is shown in the alert goes here";
function click(which) {
if (document.all) {
if (event.button==2 || event.button==3) {
alert(z);
return false;
}
}
if (document.layers) {
if (e.which == 3) {
alert(z);
return false;
}
}
}
if (document.layers) {
document.captureEvents(Event.MOUSEDOWN);
}
document.onmousedown=click;
// -->
</Script>
Just put that in between the <head> tags of your html page, edit that alert text, and you're good to go. But like I said, there are definately other (easy) ways to get the source code.
-Mike
This code only prevent the user from right click the page and then go to source. He can just click View->Source to view the source anyway.Quote:
there are definately other (easy) ways to get the source code
But nice code.
You cannot stop people fromk viewing the HTML code that your web pages consist of. It's simply not possible. The entire, *unecrypted* HTML has to be sent to the browser in order for it to render pages. Sure, there are numerous ways of making it more difficult for someone to do this, like disabling right-clicking (although this really annoys me because I often use right clicking to navigate, copy/paste etc.), but at the end of the day you're going to have to accept that people will always be able to see the HTML if they want to.
There were rumours of a product that would encrypt your HTML code when it sent it to the browser, but such a technique would require every visitor to your site to have a special plugin, so it's almost useless (the encryption would have to be two way as well so that the browser could decrypt and render the HTML properly, and I imagine that someone would come along quite quickly and write a program to do this anyway). If someone really wants to see your HTML code, they'll just make a standard GET request for it using a program such as telnet anyway.
Shouldn't this thread be in the web development forum, since it's mainly about HTML?
you could try to makes Frames and put the JS Alerts code in the frames.
You can't generally do it, but how about::
- Have some Javascript generate a string using a complicated algorithm, then document.write a script element to read in a further Javascript (named with the complicated algorithm string in) and that JS can write the HTML with document.write()
Ideally hash window.location.href into the algorithm so if someone nicks it it doesn't work
Pretty it aint but will stop some not-very-determined people.
See this URL for an example
http://homepage.ntlworld.com/slarty2/hide.html
There is a program in the net somewhere which actually encrypts the html code. When you view the source, you only see cryptic letters and numbers.
yeha there is some program the changes the code, and I've seen it done. I got a feeling that it changes the code to things like, %20 etc etc, it may seem quite pointless, but once you convert the whole thing, then you'll see why ... I was trying to read someone elses code, and it was truely annoying and difficult.
No plugins were required also, that'd be the best way I guess.
Actually it doesn't encrypt it. It just changes the spaces and symbols to..hex i think? And it's not a program, it's a simple subsituting script. The site use to be http://www.codeseal.com but that doesn't work anymore. But guess what? For your convience i've attached the code seal page! Hope this ...helps someone out there...Quote:
There is a program in the net somewhere which actually encrypts the html code. When you view the source, you only see cryptic letters and numbers.
:D
BTW trevorf is right when he said it was truely annoying and difficult to read. But it is not impossible to steal the source. I'm sure myself or anyone else can come up with a program/script that would do the exact opposite of what this does. But it is good for kiddie sites i guess. Oh and one last thing, if your page is very content heavy, this will just add to the size of the page. Weigh in the advantages and disadvantages for yourselves.
Cheers!
P.S incase you didn't know... rename the .txt file to .htm
Microsoft used to have a script-encoder. Check out microsoft.com/scripting.
Edited: Found the encoder here. CHeck it out. It sorta works. ;)
I have to agree with Slarty on the best way to protect your source code. I have seen a couple of solutions like that. They are easily crackable if you know some basic scripting but it takes stops most people from bothering.
I can't see why you'd wanna hide your source anyway? The way I figure source should never be hidden. There simply are no valid reasons for it.
This was a nice one. :) I can't write javascript code but I obviously can read it because I solved this in some five, ten minutes. (The contents come from http://homepage.ntlworld.com/slarty2...ff2791ff1e9.js ) I downloaded the script hide.js and altered the first line toQuote:
Originally posted here by slarty
See this URL for an example
http://homepage.ntlworld.com/slarty2/hide.html
and put aCode:var hashcode = hash("http://homepage.ntlworld.com/slarty2/hide.html");
at the end of the script.Code:document.write(str)
cmdrpiper, what possible things on the code of your page are so secret you don't want anyone to see them? (I hope the answer is something like "important passwords", that would give me a good laugh ;))
Pardon my n00b factor here on this one, but couldn't you just use ASP coding to hide your vital coding? You could essentially use the same Javascript document.write trick but if you put it within ASP coding it theoretically should just shoot back the html to the document without showing the viewer what was done to get it. Am I wrong on this one guys?
OMFG, thanks for replying to a thread over a year old and thanks for not reading the first post and thanks for not understanding the dates on the posts blink for a reason.
Yes, you can hide any possible code by using a server side language like ASP or PHP but cmdrpiper wanted to hide the html source of the page:Don't be surprized if someone decides to neg your post.Quote:
I am trying to hide html code that is on a webpage from being viewed through the source code viewer in IE or any browser...
The guy wanted to hide some html tags, not server side code. And no, there is no way to truly hide the html tags. You can make it annoying to get to with some javascript but javascript can be turned off. Any type of encoding method used has to be decoded at the client side and is usually trivial to break anyways. If it was difficult then it most likely wouldn't be used because the browser would have to decode it and would most likely make it take longer to see the pages.
As it goes to server side code, there are methods to encode that as well but they suffer from the same problem. The methods used are trivial to break and anything better isn't really worth using (i.e. better ways to protect information at less cost of resources). There is pre-compilation, but there are methods around that as well.
If you are qood with javascript you could have the index be the entryway to the site instead of the actual site and have it that when you click a link/image/etc... to enter the site it will open a new window without the menus and also have rightclick disabled. a bit more then the average joe is willing to go through to see your code but it can definitely be bypassed. Also with the javascript right click disablers if you right click and hit enter when the alert comes up a couple times really fast javascript will get confused and show the rightclick menu also.
PeacE
-BoB
I know this has been pretty much resolved already, but I thought someone might like to know an alternative.
Dynamicdrive.com has lots of different code for special effects on html pages, including tables, transition effect, cursor tricks, etc., etc.
I found this Source Code Encrypter at:
http://www.dynamicdrive.com/dynamicindex9/encrypter.htm
Maybe that will help too?
Watcher
Try freeware/shareware apps for HTML compression, encryption. You can set no offline use for page(s) as well. Or code your own.
GL
Do the whole site in Flash.
Or make your HTML one big huge line so anyone looking through it will give up trying to read.
Of course, if someone really wants to find something, they will.