Shoutbox

Hi there guys just made this script; I thought I'd release it here and if it pans out fine submit it to the database;

What it is is a myspace Event notifier; It will notify you of messages , comments etc in a little toast with a sound playing;

Any comments, suggestions et all are most welcome; I have done some basic testing and such to make sure it works...

I made this script because I loved the notification message feature  of the myspace IM, but thought the program itself was ugly, clunky and well , another  program I had to waste memory on .

*Edit - 22-9-06 uploaded version 0.04
Added version number to about box
Added option to play sound or not
Added option to choose which file to play , if no sound is chosen default 
sound played.

Credit: File dialog code was found on a forum here and I believe its taken from Choli's Translater Script,I believe its pretty standard code to open dialogboxs but full credit is given in the .js file

*

*Edit - 20-9-06 uploaded version 0.03 , bugfix*

Just donwloaded and imported to have a look at the code... Is this script secure? Theres not gonna be any way that someone can get my password? (Apart from it being saved in a text file )

Could the line

code:

---

xmlhttp.open("POST","http://login.myspace.com/index.cfm?fuseaction=login.process",true)

---

not be changed to

code:

---

xmlhttp.open("POST","https://login.myspace.com/index.cfm?fuseaction=login.process",true)

---

I don't know if a lot of people will feel comfortable running a script that uses their password for an external site as MP!L warns that scripts have the same capabilities as an .exe file (even if they don't )

I also changed the files name from using MyEmail to MyUserID... (Mainly because I hate having files which are classified as having more than one extension as they usually get picked up by anti-virus programs and firewalls as possibly containing harmful code (I used to have a folder called "R.E.M" and even that was suspected )

When you login to MySpace, its over a http connection, not a https connection, so there would be no added security benefits

Hi , thanks for taking a look;

The password is saved in a text file; I know that might be a security risk and I thought maybe if people like the script I would encode it in some way to prevent casual snooping, my logic was that if someone could get on your machine to snoop a file and read it , then you would have bigger security problems

I'm affraid that you could not post to https , as myspace does not support that.

If you look at the actual myspace login its a form that posts to the very same url that this script uses, my method of submitting user details is no more insecure than that

quote:

---

Originally posted by saralk
When you login to MySpace, its over a http connection, not a https connection, so there would be no added security benefits

---

Yup yup

My mistake... I thought I saw a page before that told you to check for "https" in the address bar (Don't know where I saw that then now and it's gonna bug me like hell! )

Had an alert saying I had a "Birthday Reminder", but it filled the whole toast with text... (repeating the same words over and over) Also, there should be an option to turn of the alert once it's been shown once.

Encrypting the file would be no good would it? The encryption method would be readable by the user by going to the edit script window... Just reverse it

For all intentional purposes the script appears to work fine

quote:

---

Originally posted by SpunkyLoveMuff
My mistake... I thought I saw a page before that told you to check for "https" in the address bar (Don't know where I saw that then now and it's gonna bug me like hell! )

Had an alert saying I had a "Birthday Reminder", but it filled the whole toast with text... (repeating the same words over and over) Also, there should be an option to turn of the alert once it's been shown once.

Encrypting the file would be no good would it? The encryption method would be readable by the user by going to the edit script window... Just reverse it

For all intentional purposes the script appears to work fine

---

Encrypting the file would stop casual browsers of a machine just seeing the password from browsing the file which would be something

I have tested the script on new message functionality , but its not been tested  for all the other events , because i couldn't mock those up to test, but any errors i'm sure will be easy to nail done.

You've hit one large limitation of the script, because it works by scaping your profile home page (myspace has no api) , theres no way to know if a new message found is an old one thats already been alerted or a new one , so the script HAS to keep alerting until myspace reports no new messages , ie  you check your messages.

You could write a setting to file (or registry) if when an alert is displayed. Then delete it again when the script says there are no messages on myspace...

the script should stop alerting once  you have read all your new messages, not keep alerting when there no new messages , it used to do that  ( for no reason , the same javascript worked fine in a browser) , but I thought i'd fixed that issue before release.

Thats my point. The script knows when you've checked the messages... So, if you make a setting true when the toast is first displayed and then false when the script checks and see the messages are no longer there, you can stop the toast displaying while the setting equals true

But thats what i'm saying the script should ONLY alert if there are new messages , if there are no new messages in your mail box it doesnt alert, and once you have checked your messages it stops alerting

However it does keep alerting until you have checked your messages

It would be easy to tell it to display the toast only once with some sort of variable, but there would be no way for the script to know when to turn it back on  , it doesnt 'know' that you've checked your messages , it doesnt know anything , all it know is what the myspace page tells it, so if it turned the toasts of  after displaying just one for a notification it wouldnt know if a New alert was actually a new alert and to report it or if it was still the old one and not.