Simple:
Use a
<form> tag with
method="POST" in the parent page and do a server-side check. Have the server decide if the fields were entered correctly or not and then redirect the user using the "Location" header. You should also do the check on the client, prior to submitting the form (in it's
onsubmit event) and warn the user about errors and prevent the page from submitting. If you do this, you MUST still do server-side checks because JavaScript is easy to hack and anyone could submit wrong information to your server.
Complicated:
If you must stick to JavaScript and
method="GET" for this kind of check, use a piece of JavaScript that encodes all the fields prior to sending the form (ie, in the form's
onsubmit event) and then decode them when you read them right after line 5. You could use this script
http://www.webtoolkit.info/javascript-base64.html and call it like so:
- formElement.value = Base64.encode(formElement.value); // in the onsubmit event of the previous page
-
a = Base64.decode(a); // in the callinput() function you just pasted
Also, don't forget to decode the fields on the server side if you're processing them somehow, I'm not aware of any server-side scripting language that doesn't implement some way to decode base64-encoded values.
