Some people feel the need to fortify their house with the latest-and-greatest in home security: cameras, motion detectors, heat sensors, armed sentinel robots, etc. Others are really just looking for a "protected by ATP Systems" window decal. I've definitely observed the phenomenon in client websites. Some folks are just interested in a simple, universal password to "block" casual visitors from accessing their pages.

Shaun Dishman knew that his hardware vendor had a site like that with an incredibly obvious password. However, since he couldn't remember if it was their zip code, street address number, or "secret", he just did a quick View Source to find it. Shaun was quite surprised to discovered one of the most interesting WDS (Window Decal Security) implementations ever done ... 

function validate(dataform) {

  var pass = dataform.pass.value;
  if (pass.length == 0) {
    alert("Please insert password");
    dataform.pass.focus();
    return false;
  }

  if (pass.length > 5) {
    alert("wrong password");
    dataform.pass.focus();
    return false;
  }

  if (pass.length < 5) {
    alert("wrong password");
    dataform.pass.focus();
    return false;
  }

    
  if (pass > 90210)
    alert("wrong password");
    dataform.pass.focus();
    return false;
  }
  
  if (pass < 90210) {
    alert("wrong password");
    dataform.pass.focus();
    return false;
  }
    
  var pass = dataform.pass.value;

  if (pass = 90210){ 
    return true;
  }

  dataform.pass.focus();
  return false;
}
[Advertisement] BuildMaster allows you to create a self-service release management platform that allows different teams to manage their applications. Explore how!