tags:

views:

448

answers:

3

the site addres: http://www.ynet.co.il/YediothPortal/Ext/TalkBack/CdaTalkBack/1,2497,L-3650194-0-68-544-0--,00.html

  1. fill the form with rubbish.
  2. Hit 'Send'
  3. the form post the data to another HTML without any parsing of the data i've just added

How do they do it?

A: 

Edit based on clarified question:

Numerous frameworks can be configured to intercept an html request - for instance asp.net can be set to handle any given extension and an HTTPModule could do anything with that. It's really up to web server configuration what it decides to do with any request.

also: you don't really want to be saying "hijack"

annakata
my problem is not with 'action' attribute, but with the fact they don't have any parsing code. notice that both pages, the current + the redirected are pure HTML with no javascript referenced to parse the data
+3  A: 

A likely option is that they are using a content management system where "html" on the URL doesn't actually mean it's a static html file.

Rowland Shaw
thanks.. that was helpful
A: 

This may be out of left field, but I've certainly used the occasional JS function to grab everything in the header and either parse it or pass it to another script using AJAX.

I'll sometimes use this method in a 404.html page to grab the headers of the previous page, parse them out to see where someone was trying to go and redirect them.

That is, as annakata said, one of the numerous options available.

jerebear