Login Form with ajax

Question

I need to update website login form with ajax. When visitor fails to login, message should appear without refreshing the page and when visitor can login he needs to be redirected to default.asp.

I tried doing this with the following code but no success. I did not receive any errors. Also, I am not sure if this is secure.

Thank you

    <script type="text/javascript">   
$(function() {
    var EmailAddress = $("name=EmailAddress").val();
    var Password = $("name=Password").val();

    $.ajax({
        type: "POST",
        url: "signin.cs.asp",
        data: 'EmailAddress='+ EmailAddress + '&Password=' + Password,
        success: function() {
        $('#contact_form').html("<div id='message'>success</div>");
        }

    });

});
    </script>

Answer 1

The code, as posted, has several syntax errors which might be going unnoticed:

• missing a closing brace for the success callback
• extra semi-colon at the end of the data line

You may also pass your data in key/value format, and allow jQuery to build the query string for you:

...
data: { EmailAddress : EmailAddress, Password : Password }
...

As far as security goes, you're posting the plain text username and password to the server, which is fundamentally insecure. If you have an SSL certificate, modify your url to use https://<yourdomain>/signin.cs.asp