Masking the password on inputbox vbscript

**spc-rocket** · 8th March 2007, 03:12 PM

Hi All,

Just wondering if anyone know how to mask the password on an inputbox when the user is typing in the password.

I have a situation where i'm tryin to use vb script (using the wscript) which prompts for the username and password but the password obviously needs to masked with *'s or other character.

Looked around on the net but not got much info except using IE to mask and incoporating this into the script.

Any ideas?

Ash.

**djm968** · 8th March 2007, 03:17 PM

This link should help

http://www.autoitscript.com/autoit3/...s/InputBox.htm

**mattx** · 8th March 2007, 03:25 PM

Not sure if this is of any use to you - [ Its written in AutoIT ] It may give you an idea...
Just need to change the $sPass to what you want....

; AutoIt Version: 3
; Language: English
; Platform: WinXP
; Author: Matt Marsh - mmarsh@st-johns.org.uk
; Script Function: Script that Launches Fun With Texts Teacher Console

$sPass = 'password'
Do
$sInput = InputBox( "Password Prog By Matt Marsh", "Insert password to Launch Fun With Texts Teacher Console" & @LF & "The password is CaSe SeNSiTIve.", "", ".")
If @error Then Exit
If $sPass == $sInput Then ExitLoop
MsgBox(4096 + 16, 'Error!', 'Password didn''t match.' & @LF & 'Try again.')
Until 0
Run("P:\FWT3\FWTT.EXE")

**Geoff** · 8th March 2007, 03:27 PM

Just be aware that it's not totally secure. Any password dialog box can be snooped at GDI level.

**mac_shinobi** · 8th March 2007, 03:35 PM

http://www.microsoft.com/technet/scr...5/hey0204.mspx

http://www.petri.co.il/forums/showthread.php?p=42406

**djm968** · 8th March 2007, 03:36 PM

Just to clarify.... what you are trying to do to my knowledge cannot be done using pure vbscript this code uses an IE object to mask the password

Code:

Dim bPasswordBoxWait ' A required global variable 
wsh.echo "You entered:", PasswordBox("Enter your password") 

Function PasswordBox(sTitle) 
  set oIE = CreateObject("InternetExplorer.Application") 
  With oIE 
    .FullScreen = True 
    .ToolBar   = False : .RegisterAsDropTarget = False 
    .StatusBar = False : .Navigate("about:blank") 
    While .Busy : WScript.Sleep 100 : Wend 
    With .document 
      With .ParentWindow 
        .resizeto 400,100 
        .moveto .screen.width/2-200, .screen.height/2-50 
      End With 
      .WriteLn("<html><body bgColor=Silver><center>") 
      .WriteLn("[b]" & sTitle & "[b]

") 
      .WriteLn("Password <input type=password id=pass>  " & _ 
               "<button id=but0>Submit</button>") 
      .WriteLn("</center></body></html>") 
      With .ParentWindow.document.body 
        .scroll="no" 
        .style.borderStyle = "outset" 
        .style.borderWidth = "3px" 
      End With 
      .all.but0.onclick = getref("PasswordBox_Submit") 
      .all.pass.focus 
      oIE.Visible = True 
      bPasswordBoxOkay = False : bPasswordBoxWait = True 
      On Error Resume Next 
      While bPasswordBoxWait 
        WScript.Sleep 100 
        if oIE.Visible Then bPasswordBoxWait = bPasswordBoxWait 
        if Err Then bPasswordBoxWait = False 
      Wend 
      PasswordBox = .all.pass.value 
    End With ' document 
    .Visible = False 
  End With   ' IE 
End Function 


Sub PasswordBox_Submit() 
  bPasswordBoxWait = False 
End Sub

**mattx** · 8th March 2007, 03:36 PM

it's not totally secure. Any password dialog box can be snooped at GDI level.

Indeed, its only meant as an internal quick and dirty script.....I don't have time to code an encrypted password script...

**mattx** · 8th March 2007, 03:38 PM

All that to mask a password ? Whats the world comming to.......

**fooby** · 8th March 2007, 03:46 PM

Perhaps this might be of use.

http://internet.cybermesa.com/~bstewart/passdlg/

fooby

**Geoff** · 8th March 2007, 03:51 PM

Originally Posted by mattx

Indeed, its only meant as an internal quick and dirty script.....I don't have time to code an encrypted password script...

Well no, if you can capture keyboard input directly when your dialog window has focus you can take that input and deal with it without it being exposed to GDI widgets. If you synchronise this with a normal text box display that gets filled with asterisks at the appropriate rate the user will be none the wiser.

This is how GTK/QT/Motif do it anyway.

**djm968** · 8th March 2007, 04:05 PM

Originally Posted by mattx

All that to mask a password ? Whats the world comming to.......

I agree..... and code gets even longer if you want to re-size the IE windows

Code:

Function PasswordBox(sTitle) 
  set oIE = CreateObject("InternetExplorer.Application") 

  With oIE 
    .FullScreen = True 
    .ToolBar   = False : .RegisterAsDropTarget = False 
    .StatusBar = False : .Navigate("about:blank") 
    	.Width = 400
	.Height = 200
	.Left = 300
	.Top = 200
	.Visible = 1

    While .Busy : WScript.Sleep 100 : Wend 
    With .document 
      With .ParentWindow 
        .resizeto 100,50 
        .moveto .screen.width/2-200, .screen.height/2-50 
      End With 
      .WriteLn("<html><body bgColor=Silver><center>") 
      .WriteLn("[b]" & sTitle & "[b]

") 
      .WriteLn("Password <input type=password id=pass>  " & _ 
               "<button id=but0>Submit</button>") 
      .WriteLn("</center></body></html>") 
      With .ParentWindow.document.body 
        .scroll="no" 
        .style.borderStyle = "outset" 
        .style.borderWidth = "3px" 
      End With 
      .all.but0.onclick = getref("PasswordBox_Submit") 
      .all.pass.focus 
      oIE.Visible = True 
      bPasswordBoxOkay = False : bPasswordBoxWait = True 
      On Error Resume Next 
      While bPasswordBoxWait 
        WScript.Sleep 100 
        if oIE.Visible Then bPasswordBoxWait = bPasswordBoxWait 
        if Err Then bPasswordBoxWait = False 
      Wend 
      PasswordBox = .all.pass.value 
    End With ' document 
    .Visible = False 
  End With   ' IE 
End Function 


Sub PasswordBox_Submit() 
  bPasswordBoxWait = False 
End Sub

**mattx** · 8th March 2007, 04:12 PM

...without it being exposed to GDI widgets.

Just double checked, and not many of our children know what a GDI Widget is, so my script should be quite safe for the time being.....

**Geoff** · 8th March 2007, 04:22 PM

Security through obscurity is no security at all.

1. Grab SIW here (a cool tool for other things too).
2. Tools -> Eureka!
3. Open a dialog up using a password box. IE, Sophos Autoupdates, anything interesting like that.
4. Drag the magnifying glass across to the password entry box and...

I figure if I can do it, so can someone else.

**mattx** · 8th March 2007, 07:43 PM

I figure if I can do it, so can someone else.

Our students are more interested in miniclip.com and some of the other games we allow on our network.
I'll take a look though.

8th March 2007, 11:36 PM

sorry to hijack this thread but that script was brilliant
was wondering if 1 of you clever guys could come up with a AUP screen that students would need to click accept or get logged off

LinkBack

Thread Tools

Search Thread

Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Re: Masking the password on inputbox vbscript

Similar Threads

VBScript / SQL Server

Vbscript reset a single domain user's password

VBScript Error

another VBScript question!

VBScript

Thread Information

Users Browsing this Thread

Posting Permissions