Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Encrypted field in form (HTTPS question)

14 views
Skip to first unread message

bit-n...@hotmail.com

unread,
Aug 20, 2017, 11:44:04 PM8/20/17
to
I'm trying to set up a simple blogging system, where I have a form which will have a textbox which will allow me to post stuff. Now I want a password field on the form, so that random people cannot post. I would like this password to be ENCRYPTED during transit. So - there'll be TWO textboxes, one for the password, and one for the post itself - what would the coding for the form look like? It's only the password that has to be encrypted, not the post. I realise this is more of an HTML question, but really, it concerns the whole thing, front end as well as back. I have no idea what HTTPS coding on the backend looks like. How would I extract the unencrypted password on the server side?


Thanks for your help.

Richard Damon

unread,
Aug 21, 2017, 12:02:18 AM8/21/17
to
On 8/20/17 11:43 PM, bit-n...@hotmail.com wrote:
> I'm trying to set up a simple blogging system, where I have a form which will have a textbox which will allow me to post stuff. Now I want a password field on the form, so that random people cannot post. I would like this password to be ENCRYPTED during transit. So - there'll be TWO textboxes, one for the password, and one for the post itself - what would the coding for the form look like? It's only the password that has to be encrypted, not the post. I realise this is more of an HTML question, but really, it concerns the whole thing, front end as well as back. I have no idea what HTTPS coding on the backend looks like. How would I extract the unencrypted password on the server side?
>
>
> Thanks for your help.
>

A form post in pure HTML can not encrypt some data.

You could just submit the form via HTTPS, so the whole form is
encrypted. HTTPS does the encryption in the communication layer, and you
get the unencrypted results (so it is mostly transparent to your script)

A second option, that probably isn't really worth doing, is adding
javascript to the form, and have that run on submit and have the
javascript encrypt the data. You would need to create a new
public/private key for each instance of the form sent out to do the
encryption, and send the public key with the form. On reception, the
page would need to look up the public key to find the matching private
key, and use that to decode the password.

V

unread,
Apr 3, 2023, 9:58:03 AM4/3/23
to

The Doctor

unread,
Apr 3, 2023, 10:19:20 AM4/3/23
to
In article <785e8f42-1ab5-4fef...@googlegroups.com>,
V <vvvvvvvvvvvv...@mail.ee> wrote:
>groups.google.com/g/sci.math/c/sFUlUZ47ZGs
>
>
>
>On Monday, August 21, 2017 at 6:02:18=E2=80=AFAM UTC+2, Richard Damon wrote=
>:
>> On 8/20/17 11:43 PM, bit-n...@hotmail.com wrote:=20
>> > I'm trying to set up a simple blogging system, where I have a form whic=
>h will have a textbox which will allow me to post stuff. Now I want a passw=
>ord field on the form, so that random people cannot post. I would like this=
> password to be ENCRYPTED during transit. So - there'll be TWO textboxes, o=
>ne for the password, and one for the post itself - what would the coding fo=
>r the form look like? It's only the password that has to be encrypted, not =
>the post. I realise this is more of an HTML question, but really, it concer=
>ns the whole thing, front end as well as back. I have no idea what HTTPS co=
>ding on the backend looks like. How would I extract the unencrypted passwor=
>d on the server side?=20
>> >=20
>> >=20
>> > Thanks for your help.=20
>> >
>> A form post in pure HTML can not encrypt some data.=20
>>=20
>> You could just submit the form via HTTPS, so the whole form is=20
>> encrypted. HTTPS does the encryption in the communication layer, and you=
>=20
>> get the unencrypted results (so it is mostly transparent to your script)=
>=20
>>=20
>> A second option, that probably isn't really worth doing, is adding=20
>> javascript to the form, and have that run on submit and have the=20
>> javascript encrypt the data. You would need to create a new=20
>> public/private key for each instance of the form sent out to do the=20
>> encryption, and send the public key with the form. On reception, the=20
>> page would need to look up the public key to find the matching private=20
>> key, and use that to decode the password.

This abusive spamtroll came from

comp.lang.php #168007 (1 more)
X-Received: by 2002:a05:620a:2053:b0:746:88d4:820 with SMTP id d19-
+ 20020a05620a205300b0074688d40820mr8365077qka.10.1680530278613;
+ Mon, 03 Apr 2023 06:57:58 -0700 (PDT)
X-Received: by 2002:a05:622a:199a:b0:3e3:7cec:ae42 with SMTP id
+ u26-20020a05622a199a00b003e37cecae42mr13793491qtc.6.1680530278277;
+ Mon, 03
+ Apr 2023 06:57:58 -0700 (PDT)
Path: news.nk.ca!news.uzoreto.com!peer03.ams4!peer.am4.highwinds-media.com!
+ peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-
+ out.google.com!nntp.google.com!postnews.google.com!google-groups.
+ googlegroups.com!not-for-mail
Newsgroups: comp.lang.php
Date: Mon, 3 Apr 2023 06:57:58 -0700 (PDT)
In-Reply-To: <5XsmB.32779$kJ2....@fx33.iad>
Injection-Info: google-groups.googlegroups.com; posting-host=85.253.121.82;
+ posting-account=HfIszAoAAAC8ch6q3uChpTWUALHCfEoF
NNTP-Posting-Host: 85.253.121.82
References: <d84489df-16bf-4856...@googlegroups.com> <5XsmB.
+ 32779$kJ2....@fx33.iad>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <785e8f42-1ab5-4fef...@googlegroups.com>
Subject: Re: Encrypted field in form (HTTPS question)
From: V <vvvvvvvvvvvv...@mail.ee>
Injection-Date: Mon, 03 Apr 2023 13:57:58 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 3027
Xref: news.nk.ca comp.lang.php:168007


Spamtrollers are trolls posting useless spam thinking it is content
but are posting useless noise. Spamtrolls are newsgroup vandals!
Thoses trolls are as bad as Donald
Trump on Twitter.

This makes
https://groups.google.com/search/conversations?q=Depeer%20Google%20Groups

Depeer Google groups Now!!

Spamtroller , thou art rebuked in the Name of Yahweh the Father,
Jesus the Son and the Holy Spirit for Jesus has all authority here
and Satan has no authority here!
--
Member - Liberal International This is doc...@nk.ca Ici doc...@nk.ca
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b
The Church must example being a holy bride. -unknown Beware https://mindspring.com
0 new messages