HTML form is calling a function LoginClick() using JavaScript onclick().
<input id="login" type="image" class="LoginButton" src="login.gif" onclick="var val = LoginClick(); if (val==true) window.document.forms[0].submit(); return false;" onmouseout="window.status=''" href="">
There is no function named LoginClick() in html file. Is there any other way to bypass javascript onclick() function ?

------------------------------
afras khan
------------------------------

Hi Afras,

If the JavaScript that triggers when the button is pushed simply does input validation before triggering the form submit, then the form-based login functionality should still work because it will call the URL in the form action parameter.

If the form action parameter is not a URL (perhaps it's another JavaScript function) then, again, if this is only doing validation you can bypass it by setting the default-login-form-action to the URL that ultimately needs to receive the login data.

#
# By default the FSSO engine will try to determine the login form action 
# by parsing the form itself.  There are instances however where this is
# not possible (e.g. the action is constructed from JavaScript).  The
# following configuration entry can be used to define the action URI which
# will be used if the action URI cannot be obtained from the form.
#
# If the learning capability has been enabled and the login-form-action did not
# match on a request then the default-login-form-action will also be checked. 
#
default-login-form-action = ​

If the JavaScript performs data-manipulation on the input parameters before posting then this cannot be recreated by the form-based login functionality.  In that case it may not be possible to automate the login unless you can modify the login process to be something simpler.

Jon.

------------------------------
Jon Harry
Consulting IT Security Specialist
IBM
------------------------------