Added javascript not mine

SymError() function and javascript shows up on client source code

[jrfurman]

Hi the following showed up in the source code from a client looking at one of my pages. In came to my attention because the client is unable to view the page but is receiving the document.

The document is a .php

Anyone seen these or know what it is?

Thanks
JR

function SymError()
{
return true;
}

window.onerror = SymError;

var SymRealWinOpen = window.open;

function SymWinOpen(url, name, attributes)
{
return (new Object());
}

window.open = SymWinOpen;

//-->
</script>
///////////////
My stuff here
/////////////
<script language="JavaScript">
<!--

window.open = SymRealWinOpen;

//-->
</script>

[korkus2000]

Are you or your client running Norton Internet Security 2003? Norton adds that code for some reason.

[jrfurman]

I've emailed the client to see.

I've validated the HTML.

They're trying the page on IE 6 and Netscape 4.8

What would NIS 2003 not like in my code to not display any of it?

Thanks for the tip....I'm checking on it.

I don't have it.

Thanks,

[jrfurman]

Well it is definitely a NIS 2003 problem.

I have some hidden layers that display when the user post the form and their data is invalid.

I also have one that displays when the post huge amounts of data such as images.

I can't seem to find any info on how to be compliant with NIS 2003.

Evidently this all started because people were using certian invisible images to track surfers.

I'm not doing that I'm just trying to write user friendly software.

[joshie76]

I use Norton Personal Firewall too and it really annoys me that it puts in code - more importantly that it puts in non-validating code:

<script language="JavaScript">

I actually wrote an application that spiders a website and validates each page as it goes along... I thought there were horrible problems in my code when I found that not a single site validated.... Grrr!

The only way I can sort this when I'm working locally is to disable the firewall (which I'm not happy doing)*.

It's important to remember that your code does, really, validate! It's only people who use NIS/NPF who will get this nonsense.

*I've modified the application to remove the nonsense before validating now but nonetheles... Norton! Sort it out!

[jrfurman]

Well I'm about to jump off the building.

The page that NIS 2003 is kicking out is my signup page.

This is a disaster.

Can anyone out there help me?

I'll send a link to my page so someone can help me.

Thanks.

JR