Check if user types specific words in specific window

[hiimjoey11]

I am trying to create an autoit script that checks if a user accidentally types in their password into somewhere they shouldn't (like a chat window).  So basically, if this window is active, and this word is typed, ask the user if they are sure they want to send this password.  This code i slightly modified from here works, but is VERY buggy, and I can't seem to get it to work very well:

'?do=embed' frameborder='0' data-embedContent>>

 It prompts if the user wants to send it, but doesn't work if i hit "YES."  Any help is greatly appreciated!

expandcollapse popup

HotKeySet("{ESC}","gone");allow us to quit

Global $code = "mypassword";the code to detect
Global $arrayc = StringSplit($code, "")
Global $progress = 0;how many keys in sequence detected
For $n = 1 To $arrayc[0]
    HotKeySet($arrayc[$n], "hcoder")
Next

;add some keys that are not in the code but chosen so it is unlikely
;that the keys will occur in sequence without one of these being pressed
HotKeySet("{ENTER}","hcoder")
;add more if needed.

While 1;hang around while waiting for keys
    Sleep(20)

WEnd

Func hcoder()
    HotKeySet(@HotKeyPressed)
    Send(@HotKeyPressed)
    If @HotKeyPressed = $arrayc[$progress + 1] Then
        $progress += 1
        ConsoleWrite("count = " & $progress & @LF)
    Else
        $progress = 0
    EndIf
    If $progress >= StringLen($code) AND  WinActive("Notepad") Then
       HotKeySet("{ENTER}", "DoNothing")
    EndIf

    HotKeySet(@HotKeyPressed, "hcoder")
EndFunc ;==>hcoder

Func gone()

    Exit
EndFunc ;==>gone

Func DoNothing()
    $answer = MsgBox(4, "", "Are you sure you want to send this password?")
    If $answer = 6 Then
        WinActivate("Notepad")
        Send("{ENTER}")
    EndIf
    $progress = 0
EndFunc   ;==>DoNothing

[water]

Do you think it is sensible to store the users password in the source of a script?

[Melba23]

hiimjoey11,

I see several problems with this idea:

 

- 1. It requires the password to be in plain view within the script - a dreadful idea. :ohmy:

- 2. It will fire if the password is entered with any number of intervening characters - you only ever check for the specific letters in the password and any others are ignored. So "p_a_s_s_w_o_r_d" would trigger a response as only the included characters would ever be reach the hcode function. >

- 3. And it is getting perilously close to a keylogger, which is a big no-no here.

So I am closing the thread - you need to think through this again.

M23