How do I fix the action function of my form submission? - html

I'm trying to redirect users to a pdf upon form submission however the link appears to be broken on initial arrival. The source code for the pdf appears first, however, if you refresh this page it displays correctly.
pdf destination
<form name="landing" method="POST" data-netlify="true" action="img/newsletter.pdf">
<div class="text-fields">
<h3>Email address</h3>
<input type="email" class="text-input email-input" placeholder="Enter your email" name="email">
</div>
<button class="btn-yellow" type="submit">Sign up</button>
</form>

Related

Thymeleaf Springboot email with feedback mailto link

My use case is:
We have emails that generate from a springboot application with thymeleaf template.
The idea now is to add a feedback section to the email, which when clicked on should open a new email with all the data entered..
enter image description here
So within the email I added a form section :
<form action="mailto:example#example.com" method="post" enctype="text/plain">
<div>
<label for="fb1">Feedback1:
<input type="text" name="fb1" id="fb1" />
</label>
</div>
<div>
<label for="fb2">Feedback1:
<input type="text" name="fb2" id="fb2" />
</label>
</div>
<div>
<button type="submit" name="submit" >Submit</button>
</div>
</form>
Now this piece of code is able to open the email when I am testing the html page through a browser but I am not able to do the same through the email.
Is there anything I am doing wrong?

Nested <form> linking to another .html file

Very new to html. I'm trying to create a "log in" page that has a button that links to another "sign up" html page. But I run into a problem, as I want my 3 buttons (log in, reset, sign up) to be on the same line.
The main form will link to the main website once logged in, while the "sign up" form button is supposed to send me to the sign-up.html page. If I make the forms separate, the "sign up" button will be in a new line, but if I make them nested, it will require me to fill the form.
Thanks!
<form>
<div>
<b> Email </b>
<input type="Email" placeholder="Enter Email" name="Email" required="">
<br><br>
<b>Password: </b>
<input type="Password" placeholder="Enter Password" name="Password" required="">
<br><br>
<input type="checkbox" unchecked="unchecked"> Remember me
<br><br>
</div>
<div>
<button type="submit">Log in</button>
<button type="Reset">Reset</button>
<form action="sign up.html">
<button>Sign Up</button>
</form>
</div>
</form>
Nested forms are forbidden in HTML. You should use a validator.
There is no need for the nested form to exist at all. You aren't collecting any data with it. Use a link instead. Apply CSS if you don't like the way it looks by default.

Mobile App executes html scripts

Am testing a mobile app, in one of scenario where there is option to enter text. I have inputted html code say something below and can submit it
Below codes are executed on my mobile app
enter code here
<html>
<body>
<button type="button" onclick="alert('Hello world!')">Click Me!</button>
</body>
</html>
Result: Shows the input and button controls, however button click doesn't show alert
OR
enter code here
<form action="http://google.com" method="get">
First name: <input type="text" name="fname"><br>
<button type="submit">Submit</button><br>
</form>
Result: Shows up input and button click opens targeted external page in the app.
OR
enter code here
<form action="" method="post">
<input name="username" value="admin" />
<input name="password" type="password" value="secret" />
<input name="injected" value="injected" dirname="password" />
<input type="submit">
</form>
I can even embed a youtube video and play it in app.
1.What kind of security threat is it.
2.To What extent does it harm app security.
3.Does it fall under XSS. Any example scripts to pull app info or alert popup would be helpful

Form dosnt go to action address

I have a problem. I have two forms in a web page that are different action but one of my form don't work.
<form name="loginform" id="loginform" action="./loginAction.php" method="GET" class="login-form">
<input type="hidden" name="action" value="login">
<div class="form-group">
<label class="sr-only" for="form-user">Username or Email</label>
<input type="text" name="uname" placeholder="Username or Email..." class="form-user form-control" id="form-user" required>
</div>
<div class="form-group">
<label class="sr-only" for="form-pass">Password</label>
<input type="password" name="upass" placeholder="Password..." class="form-pass form-control" id="form-pass" required>
</div>
<button name="loginBtn" value="login" type="submit" class="btn">Sign in!</button>
</form>
even in submit dosn't redirect to action page
you can see in this url
There is no problem in you html code as well as javascript code.
Its your server code which is redirecting back to the login page . As you are using get the data should be visible in the url. When the form is submited the data cleans because its redirected to the login page. SO if you provide the server code we can have a look to it
From a first look i think if you want to submit data with a form you need to set method="post"

In-page form does not send data to remotely hosted aspx form

I have an html form with the action linking to a remotely hosted aspx form. The html form mimics all the input names, ids, values, etc. of the aspx form.
After submitting the html login form with correct login data, instead of processing the data and redirecting to the target link, the page links to the raw login form with only the username data entered. Upon filling in the correct information again, the user is able to log in.
By checking the function of the other instances of the same login form on the site and encountering the same problem, I surmised that the issue is inherent in the remote aspx file, not the html form.
The form was working until about a week ago, when it promptly started behaving like this without any changes made to the code.
The live site is at http://blinqphoto.com
Thank you for any responses, this has me stumped.
Please find the html form and corresponding aspx form below.
HTML:
<form style="" name="LoginForm" method="post" action="https://acct.blinqphoto.com/loginframe.aspxredirect=http%3a%2f%2fwww.blinqphoto.com%2fmy-albums%2f" id="LoginForm">
<div>
<input name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUJMjU0ODEwOTIzZGR61068oyJyEBB4UM9Gc8Fxx4225NLn2XmKWX95/vl6Zg==" type="hidden">
</div>
<div>
<input name="__EVENTVALIDATION" id="__EVENTVALIDATION"value="/wEWBAL1/8vwCgKTqJrlAQKN8oRJAv6M0J8PQkj11RCPtUGzghOj3yic+Mr17E559GJ73UVSHbxO9VE=" type="hidden">
</div>
<span> Email <input name="UserNameTxt" id="UserNameTxt" placeholder="example#gmail.com" type="text"></span>
<br>
<span>Password<input name="PasswordTxt" id="PasswordTxt" placeholder="password" class="password" type="password"></span>
<br>
<input name="LoginButton" value="Sign in" class="LoginButton" type="submit"><br>
</form>
aspx:
<form style="" name="LoginForm" method="post" action="https://acct.blinqphoto.com/loginframe.aspx?redirect=http%3a%2f%2fwww.blinqphoto.com%2fmy-albums%2f" id="LoginForm">
<div>
<input name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUJMjU0ODEwOTIzZGR61068oyJyEBB4UM9Gc8Fxx4225NLn2XmKWX95/vl6Zg==" type="hidden">
</div>
<div>
<input name="__EVENTVALIDATION" id="__EVENTVALIDATION" value="/wEWBAL1/8vwCgKTqJrlAQKN8oRJAv6M0J8PQkj11RCPtUGzghOj3yic+Mr17E559GJ73UVSHbxO9VE=" type="hidden">
</div>
<span> Email <input name="UserNameTxt" id="UserNameTxt" placeholder="example#gmail.com" type="text"></span>
<br>
<span>Password<input name="PasswordTxt" id="PasswordTxt" placeholder="password" class="password" type="password"></span>
<br>
<input name="LoginButton" value="Sign in" class="LoginButton" type="submit"><br>
</form>
I believe this is due to the .NET event validation. If you look closely, the value of the __EVENTVALIDATION form field is not always exactly the same. This is used to validate the postback - to check that it is not coming from another URL for example, which is exactly what you are doing.
You need to disable the event validation for the login.aspx page.
Page.EnableEventValidation = false;
Is there a way to disable Event Validation for an entire page?
Note that disable event validation can possibly make your page more vulnerable.