Creating a Forms Authentication Rule - google-search-appliance

I am using Google search appliance and encountered an issue while trying to crawl forms based site. Once I add required fields to create a "new forms authentication" rule, I get a forms authentication login wizard where I enter my credentials. However, I am unable to proceed further as I get a JavaScript error (_doPostBack method ) within the wizard while trying to login. Any ideas on how I can fix this issue?
The login button is out-of-the box aspx.net button. So no manipulation is done. Any help regarding this is much appreciated.

Try turning off javascript. The GSA only needs to know about the communication between client and server. If your login-form doesn't work without javascript enabled, you'll have to edit the html in-place. I use the firebug plugin in firefox to accomplish this.

Related

Test invisible recaptcha

We have integrated invisible recaptcha in one of our websites. Whenever we submit the form it automatically submits.
I read in some google groups that we would get a challenge when accessed on edge browser. But for us, it is automatically submitted.
Any specific steps to test the invisible recaptcha?
You can test invisible recaptcha by using Chrome emulator.
You will need to add a new custom device (BOT) in developer tools, and set User Agent String to Googlebot/2.1 on Desktop. Then use the new BOT device when testing on your site to trigger the recaptcha authentication.
Note: ReCaptcha v3 will still let the google bot pass as it has a score of 0.9 when emulating in Chrome.
V2 INVISIBLE
In this case just use Incognito or Private browsing to see it works.
Here is the testing link where ReCaptcha is working:
https://www.google.com/recaptcha/api2/demo?invisible=true
Please give the credits to the guys in comments below.
I found an excellent answer that works as of 2018-08-27.
In Chrome, hit F12 to open the Developer Console. Next, toggle the Device Toolbar, select a device and click Edit... Now, add a new device with the following configuration:
Once you hit save and use the new device, the ReCaptcha should open a modal requiring the user to match images.
Credit: This answer was originally posted on https://www.tectite.com/fmhowto/test-invisible-recaptcha.php?WWWTECTITE=p32j2na5otc4rmtbmfsmf9rci6
May 2021
Everyone was talking about using the demo page to test it out. What we get after we tested and how it should looks like is what everyone miss out. Or probably thats why most of us are still searching for the answer.
Even though this question is 3yrs old, still its not clear how this recaptcha works. Iam trying my best to break in steps. Let me know if its works for you.
Google Demo page test
Important
Follow the steps below in the Incognito window
with the parameter
Go to this url https://www.google.com/recaptcha/api2/demo?invisible=true (notice the url has ?invisible=true parameter at the end)
You should see nothing but an pre-filled form with an active 'submit' button with no 'checkbox' captcha, instead you will see the badge at the bottom right.
Click the 'Submit' button and you should see something like this. This is the verification check point.
4. Select the relevant image and the page should redirect with the message saying
Verification Success... Hooray!
But what if you didn't see any image?
If you are not seeing any verification image and the form submits with
Verification Success... Hooray!
then either the form is not working (mostly that's not the case) or you need to clear your browser cache and try again.
without the parameter
Go to this url, https://www.google.com/recaptcha/api2/demo (notice, i have removed the ?invisible=true parameter from the url)
You should see the good 'ol robot checkbox captcha above the 'Submit' button.
3. Also you can notice there won't be captcha badge at the bottom right.
Your Website
Try it in the Incognito window
Just like the demo you should get the same result in your website if you use invisible captcha. (Don't worry about the url parameters)
If your page displayed the captcha badge at the bottom right then after clicking the 'submit' button you should see the popup image window.
If you do not get any popup and the form submits then there's an issue with your captcha or could be browser cache.
Not seeing the checkbox ... ?
Here are some notes from reCaptcha help page - https://support.google.com/recaptcha#6223828
If you're seeing this reCAPTCHA challenge, your browser environment doesn't support the reCAPTCHA checkbox widget.
There are a few steps you can take to improve your experience:
Make sure your browser is fully updated (see minimum browser requirements)
Check that JavaScript is enabled in your browser
Try disabling plugins that might conflict with reCAPTCHA
Please note that some sites may have incorrectly integrated with reCAPTCHA - in this case please contact the site's webmaster.
WordPress Contact Form 7 users
You do not need to add the [recaptcha] tag.
reCAPTCHA v3 doesn’t need a CAPTCHA widget (the “I’m not a robot” checkbox used in reCAPTCHA v2) to work, so [recaptcha] form-tags are no longer necessary. If [recaptcha] form-tags are found in a form template, Contact Form 7 5.1 or higher ignores them and replaces them with an empty string.
https://contactform7.com/recaptcha/
As of 2019-06-21, it appears that it is sufficient with Google Chrome (v74.0.3729.169) to bring up a new incognito window to force the recaptcha to execute. (I had needed this for our own recaptcha testing, so I'm glad I found it.)
I am still struggling a little bit with this but I found that the following things make invisible recaptcha puzzle more likely to appear:
Log into the recaptcha admin and set it to maximum security
Open your site from an incognito tab.
Sometimes leaving the login page open and trying to login after some time has passed seems to trigger the recaptcha puzzle.
I must admit though that these don't work all of the times and there are times that I really struggle to get it to work.
Update: It seems a bit strange but I have found that the invisible ReCaptcha is more likely to appear when I submit a form using the Enter key instead of pressing a button with the mouse.
Invisible recaptcha check fails if you try to access your page via automated tests (in my case chrome browser) since chrome has a feature to recognize if the browsers is controlled by such software... so try to create easy tests in Python or Java(+webdriver), to see if recaptcha is implemented correctly.
If you did not implement the code yourself, the first thing to check is the source code, see if reCaptcha is actually loaded. When using a CMS, I search for this line (or similar):
script type='text/javascript' async defer src='https://www.google.com/recaptcha/api.js?onload=renderInvisibleReCaptcha&render=explicit&hl=de-CH'
If you have the luxury of a VPN, switch to a bad rep IP or country or an IP commonly used for P2P. This works for me most of the time.
Go thru the steps to test the re-captcha with dev tools open. Go to the network tab and find the POST where the form is submitted. Right click that line and copy as cURL.
Paste into the CLI and voila, you get the failure and the output of the cURL is the HTML that the server sent back.
2022 Answer that worked for me!
Please do give this one a go as it's the only one that actually worked for me after hours of testing.
Go to your reCAPTCHA admin account: https://www.google.com/recaptcha/admin/
Go to your site settings
Move the "Security Preference" slider all the way to the right to make reCAPTCHA trigger more often
Open an Incognito window, or even better a secure web browser with a built in encrypted proxy (I think this makes reCAPTCHA more suspicious of your browser) - I used a browser call Epic Browser, which is also Chromium based: https://www.epicbrowser.com/. Note: Just using Incognito on Chrome did not work for me, hence why I went to go use Epic.
Attempt to submit your form - you should hopefully receive the popup check!
As others mentioned you can also test if the browser alone triggers reCAPTCHA check by going to https://www.google.com/recaptcha/api2/demo?invisible=true and submitting the form.
This finally helped me as I was going crazy thinking my reCAPTCHA setup was not working and that I coded something wrong... But no, it was working! Just not very suspicious apparently.
I hope this helps someone as it did me!
The way I tackled it:
Go to your POST to google.com/recaptcha/api/siteverify
Before the response is returned, set the success property in the response to false.
I'm using Guzzle in Laravel (thanks to this example):
$response = $client->post('https://www.google.com/recaptcha/api/siteverify', [
'query' => [
'secret' => env('RECAPTCHA_V3_SECRET_KEY'),
'response' => $value,
'remoteip' => $_SERVER['REMOTE_ADDR'],
]
]);
$body = $response->getBody();
$contents = json_decode($body->getContents());
$contents->success = false;
return $contents;

Joomla Chronoforms working when logged in but not when browsing as a guest

I decided to ask this question here because this might not be completely Chronoforms-plugin related. My problem is that I've made a custom Joomla registration form with Chronoforms, but when I'm trying to submit it, the page just refreshes. In fact none of the forms made by Chronoforms aren't working if I'm not logged in. But if I am, they are all working just fine.
My guess is that this has something to do with Mootools, as Chronoforms is using Mootools and when I log in, the site seems to be loading Mootools so that the forms work. But I don't know how could I troubleshoot this... Here's the link to the registration form: http://tylypahka.tk/muuta/rekisteroidy
Any suggestions and help will be much appreciated! :)
try temporarily setting site Error Reporting to Maximum to see if there are any meaningful error messages
try temporarily enabling debug
if using ChronoForms v4, try setting Relative URL to No in the form
General tab
if using CAPTCHA with cache enabled, try with cache disabled
if using CAPTCHA, try temporarily disabling CAPTCHA or try RECAPTCHA instead
Reference: http://chronoengine.com/forums/viewtopic.php?f=2&t=65518&p=311707&hilit=form+not+submitting#p264431

Google Docs spreadsheet form / permissions

I have a Google Doc spreadsheet, which I created a native Form for. I copied the form code, and integrated it into my own page here.
This form was working until I gave the website owner permission to view the spreadsheet.
Since then, when we hit submit, it takes us to the native form page, and does not insert form data into the spreadsheet. (You're welcome to test the form.)
Should providing viewing permissions to the spreadsheet break my own version of the form?
Did you set permissions via docs.google.com? If so then no it should not have changed anything. I got all the way through the form to "Attending
Your response has been recorded." Is this what you are getting as well or do you have a backend error?
If it is not a backend error and I was able to get somewhere you couldt I would suggest clearing your browser chache and possibly resetting your router as sometimes they hold a cache of older versions of a website.
Did the current form of yours manage to work this before? I mean. It is shown that in the native form the questions are text boxes. While in your GUI form, it had radio buttons and check boxes, since you are calling the native post back url?

SCRIPT5: Access is denied in IE9 for iframe on the same domain

i am trying to submit form with file attached using iframe(through AJAX). I am using rails & remotipart gem. actually i've tried jquery.form.js library as well, but no luck. when i submit form i am getting "SCRIPT5: access denied" only in IE9 and when i am redirected to the page from my gmail account. It works fine when i go to my site and submit form with file attached, but doesn't work when i go to site through the link from gmail(for other emails it works). i checked how it works - it create hidden iframe set form.target= iframe.name(name of iframe) & iframe.src=javascript:false; When form is submitted it throw exception = "SCRIPT5: access denied". I've tried to set iframe.domain = domain of my site but didn't work - iframe = $("");
btw, i am submitting form to the same domain
Anyone solved this issue ?
I don't know anything about jQuery, but it is a common javascript error. IE doesn't allow forms with files attached to be submitted from a script.
If you however place the form in a seperate file and load it into an iframe, frame.form.submit() will work.
I suggest you to use the lastest of JQuery(> jquery-1.8.0). Since the version 1.8.0, they solved somes IE9's bugs whose this error.
http://blog.jquery.com/2012/08/30/jquery-1-8-1-released/
I had the same issue. I was using the same versions as in the example. The example worked but I didn't manage to make it work in my app.
I'm using Backbone and I think it is related to creating the form dynamically, but unfortunately I didn't have time to debug the exact problem.
I moved to https://github.com/blueimp/jQuery-File-Upload, and now it works.

How to login to website using webbrowser control

I need to programmtically key in the username, password for a website using Webbrowser control in Visual Basic 6.0 application (please note it is not .Net application) and also click on Login button.
Also I am not trying to hack or spam. The requirement is part of interfacing that I am trying to create between multiple applications.
Please let me know how to go about this.
Thanks
You can use the Document property of the WebBrowser control to interact with the HTML page. In your case, it would depend on the structure of the web site, but you should be able to do something like this (untested)
With webBrowser.Document.forms(1)
.getElementByName("username").value = "username"
.getElementByName("password").value = "password"
.submit()
End With
I think you should use some HTTP request and store the returned cookie (there probably will be one). Observe the login process on the page if it's GET or POST method, and if it uses a cookie. I don't think you need webbrowser control for this.

Resources