Username:
Password:
Remember Me?
User Scripts
Title:
PassCard

Date Added:
2011-07-29 18:49:38
Installs:
227
Description:
Hi there,

In this script we propose a simple scheme that allows Windows CardSpace to be used as a password manager, thereby improving the usability and security of password use as well as potentially encouraging CardSpace adoption. Usernames and passwords are stored in personal cards, and these cards can be used to sign on transparently to corresponding websites. The scheme, called 'PassCard', does not require any changes to login servers or to the CardSpace identity selector and, in particular, it does not require websites to support CardSpace. Both http and https-enhanced websites are supported.
We published a paper, titled 'Using CardSpace as a Password Manager'
(visit http://www.oman4ever.org/Publications/PassCard_IDman2010.pdf)
in which we describe how the scheme operates, and give details of a proof-of-concept prototype. Security and usability analyses are also provided.

Polite notes:
- Please note that the AES encryption/decryption 256-bit key is in the JavaScript file itself. Please feel free to choose it to your own key (e.g. try the function makeKey() inside the user script).
- Please note that you can view the source code (including the crypto key) simply by right-clicking on the webpage.
- Please note that PassCard is provided as is without any warranty explicit or implicit.
- Please note that this is my first EVER open source project, so please excuse my naivety.

Finally, your comments are most welcome. Please report websites that do not work with PassCard, and I’d be happy to *try* to fix them should knowledge and time allow (of course this may take years, so please bear with me!).

Licence:
THE PassCard SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Kind regards, and I hope you have fun using PassCard!
Haitham Al-Sinani
Preview of PassCard
View script source of PassCard
// ==UserScript==
// @name          PassCard_Secure_Final
// @description   PassCard: Passing People (PPP), PassCard: Internetting People (PIP). PassCard is a CardSpace-based password manager [30/07/2011, version: 1.1].
// @include       *
// ==/UserScript==
//Author: Haitham Al-Sinani
//PhD Supervisor: Professor Chris Mitchell
//PassCard has so far been successfully tested with the following websites (which were most recently checked on 25/12/2010):
//1-  https://www.myopenid.com/signin_password
//2-  http://ieeexplore.ieee.org/Xplore/guesthome.jsp
//3-  https://www.dropbox.com/
//4-  https://www.google.com/accounts/Login
//5-  https://login.yahoo.com/config/login
//6-  https://www.crashplan.com/account/login.vtl
//7-  http://www.shdow.com/ordergiftcertificate/admin_login.php
//8-  http://www.facebook.com
//9-  http://login.facebook.com/login.php
//10- https://www.amazon.co.uk/gp/css/homepage
//11- https://market.android.com/
//12- http://aljazeera.net/portal
//13- http://www.springerlink.com/default.aspx
//14- http://en.wikipedia.org/w/index.php
//15- https://portal.acm.org/signin.cfm
//16- http://www.youtube.com/
//17- https://www.paypal.com/
//18- http://www.apress.com/
//19- http://www.flickr.com/ 
//20- http://wiki.answers.com 
//21- http://main.omandaily.om/
//22- https://admin.1and1.co.uk/xml/config/Login 
//23- https://webmailcluster.1and1.co.uk/xml/webmail/Login 
//24- http://www.oman4ever.org/adminlogin.jsp
//25- http://mc.manuscriptcentral.com/comml-ieee
//26- http://mc.manuscriptcentral.com/compj
//27- https://account.lycamobile.co.uk/login.aspx?lang=en
//28- http://www.aitsafe.com/mtracker/index.htm/
//29- http://www.dawsonera.com/admin_login.html
//30- https://ccp.my-hosting-panel.com/Default.aspx?pid=Login&ReturnUrl=%2fdefault.aspx









(function () {
    var MyWebPage = 'http://www.isg.rhul.ac.uk/~cjm/PassCard.htm'; //Enter your webpage here; it must use http, (and not https), e.g.'http://www.identityblog.com/index.php'.
    var DefaultPage = 'http://www.isg.rhul.ac.uk/~cjm/PassCard.htm';
    var localhost = 'http://localhost:8080/Haitham/phpacademy/loginsession/PhD/CardSpace/simpleloginform.html';
    //MyWebPage = DefaultPage;
    //MyWebPage = 'http://www.isg.rhul.ac.uk/~cjm/PassCard.htm';
    //var DefaultPage = 'http://www.oman4ever.org/adminlogin.jsp';
    var CardSpaceLogo = 'http://www.devtips.net/images/infocard_300x210.png', CardSpaceLogo_2 = 'https://www.myopenid.com/static/InformationCards/images/infocard_30x21.png', PassCardLogo_HTTP = "http://www.oman4ever.org/PassCard/PassCard_logo.jpg", PassCardLogo_HTTP = "http://www.oman4ever.org/PassCard/PassCard_logo_2.jpg", PassCardLogo_HTTPS = "https://porsche.mochahost.com/~ece50148/PassCard/PassCard_logo.jpg";
    PassCardLogo_HTTPS = "https://porsche.mochahost.com/~ece50148/PassCard/PassCard_logo_2.jpg";
    PassCardLogo_HTTPS = "https://porsche11.mochahost.com/~ece50148/PassCard/PassCard_logo_2.jpg";
    var flag = false, flag_after = false, UsernameAndPasswordFieldsFound = false;
    var usernameField = false, passwordField = false, submitField = false, submitField_found = false;
    var username_field = "", password_field = "", submit_field = "", Login_Page = "", queryParameters = "";
    var Facebook = "http://www.facebook.com/", Facebook_NoWWW = "http://facebook.com/", Facebook_Index = "http://www.facebook.com/index.php", Facebook_Index_NoWWW = "http://facebook.com/index.php", FacebookLoginPage_HTTP = "http://www.facebook.com/login.php", FacebookLoginPage_HTTPS = "https://login.facebook.com/login.php";
    var PassCard_ns = PassCard_Namespace = PassCardUniqueURL = "http://www.oman4ever.org/PassCard", PassCardForm = "http://www.oman4ever.org/PassCard/PostForm", HiddenFormVariableUsername = "http://www.oman4ever.org/PassCard/HiddenFormVariableUsername", HiddenFormVariablePassword = "http://www.oman4ever.org/PassCard/HiddenFormVariablePassword", PassCardFormSubmit = "http://www.oman4ever.org/PassCard/PassCardFormSubmit";
    //alert("ns: "+PassCard_ns); //Note that using dot '.' in a variable name, as in (PassCard.ns), is not allowed in JavaScript. 
    var key = "cba2b884949044bb34a461940a1644b4acd3bc0c4028d06d8b3c58b4105907a8", encryptionMode = "CBC";
    //alert(key.length);
    //MyWebPage = 'http://rhul.ac.uk/';//http://uk.yahoo.com/Permission issues (Forbidden)
    //MyWebPage has so far been tested with 'http://rhul.ac.uk/', DefaultPage, 
    //Facebook special case: for some reason FaceBook just generates an error if you try to embedd an HTML <script> element (e.g. containing some JavaScript function) using appendChild method to the http-based facebook login page. This problem seems to disappear if we redirect the user to the https_based facebook login page.
    //http://www.facebook.com/login.php https://login.facebook.com/login.php
    queryParameters = document.location.href.substring(0, document.location.href.indexOf("?"));
    if (queryParameters == "" || queryParameters == null)
        Login_Page = document.location.href;
    else
        Login_Page = document.location.href.substring(0, document.location.href.indexOf("?"));

    //alert(Login_Page);
    if (Login_Page == FacebookLoginPage_HTTP)
        window.location = FacebookLoginPage_HTTPS;

    // The following statements just for testing purposes ... please ignore them!
    //alert(document.location.protocol);
    //alert(document.location.hostname);//prints: 1and1.co.uk
    //alert(document.location.host);//prints: 1and1.co.uk
    //alert(document.location.href.indexOf(";"));
    //alert(document.location.href.substring(0,document.location.href.indexOf(";")));
    //alert(location.search);
    //alert(document.domain); //prints: www.oman4ever.org
    //alert(document.body.innerHTML); //With this, you could actually print out all of the current webpage's code.
    //alert(window.location);
    //alert(window.location = "view-source:" + window.location.href); // this does NOT work!
    //window.history object. //prints out [object]
    //alert(history.length); //denotes the number of pages visited before visiting the current page. 
    //alert(history.current);
    //alert(window.history.previous);
    //alert(document.referrer);
    //return;

    //For the following Querystring function, many thanks to our reference:	http://adamv.com/dev/javascript/querystring
    function Querystring(qs) // optionally pass a querystring to parse
    {
        //qs=unescape(qs);
        this.params = {};

        if (qs == null) qs = location.search.substring(1, location.search.length);
        if (qs.length == 0) return;

        // Turn <plus> back to <space>
        // See: http://www.w3.org/TR/REC-html40/interact/forms.html#h-17.13.4.1
        qs = qs.replace(/\+/g, ' ');
        var args = qs.split('&'); // parse out name/value pairs separated via &

        // split out each name=value pair
        for (var i = 0; i < args.length; i++) {
            var pair = args[i].split('=');
            var name = decodeURIComponent(pair[0]);

            var value = (pair.length == 2)
			? decodeURIComponent(pair[1])
			: name;

            this.params[name] = value;
        }
    }

    Querystring.prototype.get = function (key, default_) {
        var value = this.params[key];
        return (value != null) ? value : default_;
    }

    Querystring.prototype.contains = function (key) {
        var value = this.params[key];
        return (value != null);
    }



    //Cookies ...
    var elm_setCookie = document.getElementsByTagName("head")[0].appendChild(document.createElement('script'));
    elm_setCookie.setAttribute('language', 'javascript');
    elm_setCookie.setAttribute('type', 'text/javascript');
    elm_setCookie.text = [function setCookie(c_name, value, expiredays) {
        var exdate = new Date();
        exdate.setDate(exdate.getDate() + expiredays);
        document.cookie = c_name + "=" + escape(value) + ((expiredays == null) ? "" : "; expires=" + exdate.toGMTString());
    } ];


    var elm_setShortLivedCookie = document.getElementsByTagName("head")[0].appendChild(document.createElement('script'));
    elm_setShortLivedCookie.setAttribute('language', 'javascript');
    elm_setShortLivedCookie.setAttribute('type', 'text/javascript');
    elm_setShortLivedCookie.text = [function set_Shortlived_Cookie(name, value, seconds) {
        if (typeof (seconds) != 'undefined') {
            var date = new Date();
            date.setTime(date.getTime() + (seconds * 1000));
            var expires = "; expires=" + date.toGMTString();
        }
        else {
            var expires = "";
        }

        document.cookie = name + "=" + value + expires + "; path=/";
    } ];



    var elm_getCookie = document.getElementsByTagName("head")[0].appendChild(document.createElement('script'));
    elm_getCookie.setAttribute('language', 'javascript');
    elm_getCookie.setAttribute('type', 'text/javascript');
    elm_getCookie.text = [function getCookie(c_name) {
        if (document.cookie.length > 0) {
            c_start = document.cookie.indexOf(c_name + "=");
            if (c_start != -1) {
                c_start = c_start + c_name.length + 1;
                c_end = document.cookie.indexOf(";", c_start);
                if (c_end == -1) c_end = document.cookie.length
                return unescape(document.cookie.substring(c_start, c_end));
            }
        }
        return ""
    } ];

    var elm_deleteCookie = document.getElementsByTagName("head")[0].appendChild(document.createElement('script'));
    elm_deleteCookie.setAttribute('language', 'javascript');
    elm_deleteCookie.setAttribute('type', 'text/javascript');
    elm_deleteCookie.text = [function deleteCookie(cookie_name) {
        var cookie_date = new Date();  // current date & time
        cookie_date.setTime(cookie_date.getTime() - 1);
        document.cookie = cookie_name += "=; expires=" + cookie_date.toGMTString();
    } ];

    //Referrer field:
    var elm_HTTP_Referrer_field = document.getElementsByTagName("head")[0].appendChild(document.createElement('script'));
    elm_HTTP_Referrer_field.setAttribute('language', 'javascript');
    elm_HTTP_Referrer_field.setAttribute('type', 'text/javascript');
    elm_HTTP_Referrer_field.text = [function HTTP_Referrer_field() {
        //<!-- Hide script from old browsers<br>
        return document.referrer;
        //-- Stop hiding script --> 
    } ];

    //alert('Thanks for visiting from ' + HTTP_Referrer_field()); 
    //return;   

    // Make a pseudo-random encryption key... emphasis on *pseudo*
    var hex = ['0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '0', 'a', 'b', 'c', 'd', 'e', 'f'];
    var keySz = keySizeInBits / 4; //keySizeInBits defined in aes.js
    function makeKey() {
        var ret = "";
        while (ret.length < keySz)
            ret += hex[Math.floor(Math.random() * 15)];
        return ret;
    }
    //User's own webpage
    if (Login_Page == MyWebPage) {
        var elm_CardSpaceTag_invoke = document.getElementsByTagName("body")[0].appendChild(document.createElement('div'));
        //elm_CardSpaceTag_invoke.setAttribute('style','visibility: hidden');
        elm_CardSpaceTag_invoke.setAttribute('id', 'PassCard_TempForm');
        elm_CardSpaceTag_invoke.innerHTML = "<form id='CardSpace_Form_2010' name ='CardSpace_Form_2010' method='post' action=''><input type='text' id='PassCard_Username' name='PassCard_Username' value='PassCard_Username' /><br/><input type='password' id='PassCard_Password' name='PassCard_Password' value='PassCard_Password' /><br/><input type='submit' id='PassCard_Submit' name='PassCard_Submit' value='PassCard_Submit' /></form>"; //<input type="submit" id="submit2009" name="Submit"/>; //Remember that the name of this hidden value is of paramount importantance
        document.getElementById("PassCard_TempForm").style.visibility = "hidden";
    }

    //Scan the web page for a form, and ensure that there is at least one!
    //Note that we assume that a password field would immediately follow the username field inside an HTML form; indeed, our entire search depends on this very assumption!			
    var forms = document.getElementsByTagName('form');
    //alert(forms.length);
    if (forms.length > 0) {
        //Ensure that each form has at least a pair of 'input' tags, one of type 'text' and the other of type 'password'. (This way will stop the script modifying non-credential forms such as the famous google form!)
        Forms_Loop: for (var formCounter = 0; formCounter < forms.length; formCounter++) {
            var formName = document.forms[formCounter].name;
            //alert(formCounter + "- Form Name:	" + formName);

            //If the current form does not have any child nodes, then continue to the next form.
            if (forms[formCounter].hasChildNodes() != true)
                continue Forms_Loop;

            var input_elements = document.forms[formCounter].getElementsByTagName('input');
            if (input_elements.length >= 2) //Each form must have at least 2 input fields: username and password. (Note that I did not say '3', because the 'login' field might either be of type ('input' of attribute submit) or of type (image) or of type 'button', etc.)
            {
                //alert("No of input_elements: " + input_elements.length);
                inputs_Loop: for (var inputLoop_counter = 0; inputLoop_counter < input_elements.length; inputLoop_counter++) {
                    //alert("For loop number:	"+ inputLoop_counter);
                    var name, _type, _class;
                    try { name = input_elements[inputLoop_counter].getAttribute("name") || ""; } catch (e) { };
                    try { _type = input_elements[inputLoop_counter].getAttribute("type") || ""; } catch (e) { };
                    try { _class = input_elements[inputLoop_counter].getAttribute("class") || ""; } catch (e) { };
                    try { _id = input_elements[inputLoop_counter].getAttribute("id") || ""; } catch (e) { };

                    //alert("Type:	" + _type.toLowerCase());
                    if ((_type.toLowerCase()) == "text" || (_id.toLowerCase() == "username")) //usernameField? (See the login page at flicker.com for the latter case)
                    {
                        //alert("Inside text:	" + _type.toLowerCase());
                        username_field = input_elements[inputLoop_counter];

                        inputLoop_counter = inputLoop_counter + 1; // Here we add 1 in the hope that the next input field would be the password field; if it is not, then we subtract  1, and resume searching.
                        try { name = input_elements[inputLoop_counter].getAttribute("name") || ""; } catch (e) { };
                        try { _type = input_elements[inputLoop_counter].getAttribute("type") || ""; } catch (e) { };
                        try { _class = input_elements[inputLoop_counter].getAttribute("class") || ""; } catch (e) { };
                        //Note that we assume that a password field would immediately follow the username field inside an HTML form; indeed, our entire search  method depends on this particular assumption.
                        if ((_type.toLowerCase() == "password") || (_type == "text" && name.toLowerCase().substring(0, 5) == "passw") || (_class.indexOf("mpwdpasswd") > -1)) //passwordField?
                        {
                            //alert("Inside password:	" + _type.toLowerCase());
                            password_field = input_elements[inputLoop_counter];
                            flag = true;

                            // Add another for loop to skip any non-submit fields, such as (checkbox), until you find submit. This is really important since a large number of websites add a 'remember me',typically of type="checkbox", feature between the password field and the submit field. Examples of those websites include yahoo, SpringerLink, Google, YouTube, Gmail, etc
                            inputLoop_counter = inputLoop_counter + 1;
                            var input_image_Loop_counter = inputLoop_counter;
                            skipping_Loop: for (inputLoop_counter; inputLoop_counter < input_elements.length; inputLoop_counter++) {

                                try { name = input_elements[inputLoop_counter].getAttribute("name") || ""; } catch (e) { };
                                try { _type = input_elements[inputLoop_counter].getAttribute("type") || ""; } catch (e) { };
                                try { _class = input_elements[inputLoop_counter].getAttribute("class") || ""; } catch (e) { };
                                //alert(_type.toLowerCase());
                                //Add a check to skip registration forms. Terminate the user script if more than one password field is found between the username field and the (first) submit field.  
                                if ((_type.toLowerCase() == "password") || (_type == "text" && name.toLowerCase().substring(0, 5) == "passw") || (_class.indexOf("mpwdpasswd") > -1)) {
                                    //alert("This is a registration page ... exiting!");
                                    return;
                                }

                                //if ((_type.toLowerCase()) == "submit" || (_type.toLowerCase()) == "image") //submitField OR imageSubmitfield?
                                if ((_type.toLowerCase()) == "submit") //submitField? A submit field is most commonly of type submit, that's why we started searching for this first.
                                {
                                    //alert(_type.toLowerCase());
                                    //alert("I'm inside the submit/image check!");
                                    //Keep track of the submit_field for later use, e.g. you might want to position CardSpace logo just above it
                                    submit_field = input_elements[inputLoop_counter];
                                    submitField_found = true;

                                    //alert("Becuase I've found username, password, and submit fields all in one go, inputLoop_counter'm gonna break out of the foor loop now! Good Bye:)");
                                    break skipping_Loop; //Since you have found the username, password and submit fields, then break out of the for loop
                                    break inputs_Loop; //This line will not be executed
                                }

                            }

                            //If username and password fields have been found, but the submit field has not yet been found, try searching for an input tag of type image, i.e. <input type='image'/>
                            //alert("Flag: "+flag+"	submitField_found: "+submitField_found);
                            //alert("First input_image_Loop_counter: "+input_image_Loop_counter +"	// First input_elements.length:" +input_elements.length);
                            if ((flag) && (!submitField_found)) {
                                skipping_Loop_inputImage: for (input_image_Loop_counter; input_image_Loop_counter < input_elements.length; input_image_Loop_counter++) {
                                    try { _type = input_elements[input_image_Loop_counter].getAttribute("type") || ""; } catch (e) { };
                                    //alert("I'm here"+_type.toLowerCase());

                                    if ((_type.toLowerCase()) == "image") //imageSubmitfield?
                                    {
                                        //alert("I'm inside the submit/image check!");
                                        //Keep track of the submit_field for later use, e.g. you might want to position CardSpace logo just above it
                                        submit_field = input_elements[input_image_Loop_counter];
                                        submitField_found = true;
                                        //alert("Becuase I've found username, password, and submit fields all in one go, input_image_Loop_counter'm gonna break out of the foor loop now! Good Bye:)");
                                        break skipping_Loop_inputImage; //Since you have found the username, password and submit fields, then break out of the for loop
                                        break inputs_Loop; //This line will not be executed
                                    }

                                }

                            }

                            //If username and password fields have been found, but the submit field has not yet been found, try searching for an image tag, i.e. <image/>, embedded in an <a> tag.							
                            if ((flag) && (!submitField_found)) {
                                var a_elements = document.forms[formCounter].getElementsByTagName('a');
                                //alert("The submit button is in the form of \n an <a> tag");
                                //alert(a_elements.length);
                                //alert(document.location.hostname);
                                //if (document.location.hostname == "mc.manuscriptcentral.com" || document.location.hostname == "aljazeera.net") {
                                if (document.location.hostname == "mc.manuscriptcentral.com") {
                                    submitField_found = true;
                                    break inputs_Loop;
                                }
                                if (a_elements.length >= 1) {
                                    a_Loop: for (var aLoop_counter = 0; aLoop_counter < a_elements.length; aLoop_counter++) {
                                        image_elements = a_elements[aLoop_counter].getElementsByTagName('image');
                                        //alert(aLoop_counter);
                                        if (image_elements.length >= 1) {
                                            //alert("The submit tag is an <a> href tag embedded in a image");
                                            submit_field = a_elements[aLoop_counter];
                                            //alert(submit_field);
                                            submitField_found = true;
                                            break a_Loop;
                                            break inputs_Loop; //This line will not be executed

                                        }

                                    }
                                }

                            }

                            //If username and password fields have been found, but the submit field has not yet been found, try searching for an image tag, i.e. <img />
                            //alert("Flag: "+flag+"	submitField_found: "+submitField_found);
                            if ((flag) && (!submitField_found)) {
                                var img_elements = forms[formCounter].getElementsByTagName('img');
                                //alert("The submit button is in the form of a submission image");
                                if (img_elements.length >= 1) {
                                    img_Loop: for (var imgLoop_counter = 0; imgLoop_counter < img_elements.length; imgLoop_counter++) {

                                        //We assume that either the first image inside the form that has an onclick event is the submission image, or the last image inside the form is the submission image.
                                        if ((image_elements[imgLoop_counter].onclick != "") || (imgLoop_counter == img_elements.length)) {
                                            submit_field = image_elements[imgLoop_counter];
                                            submitField_found = true;
                                            break img_Loop;
                                            break inputs_Loop; // I know I know this line will never be executed.

                                        }

                                    }


                                }

                            }

                            //If username and password fields  have been found, but the submit field has not yet been found, try searching for an <a> tag that has its href set to JavaScript:void.							
                            if ((flag) && (!submitField_found)) {
                                var a_elements = document.forms[formCounter].getElementsByTagName('a');

                                if (a_elements.length >= 1) {
                                    a_Loop: for (var aLoop_counter = 0; aLoop_counter < a_elements.length; aLoop_counter++) {
                                        a_element_herf = a_elements[aLoop_counter].getAttribute('href');
                                        a_element_herf = a_element_herf.toLowerCase();
                                        //alert(a_element_herf);
                                        if (a_element_herf.substring(0, 11) == "javascript:") {
                                            //alert("The submit tag is an <a> href tag with its href set to javascript:...");
                                            submit_field = a_elements[aLoop_counter];
                                            submitField_found = true;
                                            break a_Loop;
                                            break inputs_Loop; //This line will not be executed
                                        }

                                    }
                                }

                            }

                            //If username and password fields  have been found, but the submit field has not yet been found, try searching for an <button> tag of type 'submit' (e.g. https://login.yahoo.com)						
                            if ((flag) && (!submitField_found)) {
                                var button_elements = document.forms[formCounter].getElementsByTagName('button');
                                //alert("button_elements: " + button_elements.length);
                                if (button_elements.length >= 1) {
                                    button_elements_Loop: for (var buttonLoop_counter = 0; buttonLoop_counter < button_elements.length; buttonLoop_counter++) {
                                        var button_element_type = button_elements[buttonLoop_counter].getAttribute('type');
                                        //alert(a_element_herf);
                                        if (button_element_type.toLowerCase() == "submit") {
                                            //alert("The submit tag is a <button>  tag  of type 'submit'");
                                            submit_field = button_elements[buttonLoop_counter];
                                            submitField_found = true;
                                            break button_elements_Loop;
                                            break inputs_Loop; //This line will not be executed
                                        }

                                    }
                                }

                            }
                            //alert("The submit field has not been found");
                            break inputs_Loop;
                        }
                        //Subtract one of the inputLoop_counter since you added one... (Because we did not find a password field that immediately followed a text field, we assume that the 'detected' text field was not the username field, and we hence continue searching.  ) 
                        inputLoop_counter = inputLoop_counter - 1;
                    }

                }
            }
            else
                continue Forms_Loop;

            //Special case for Royal Holloway, University of London
            if (document.domain == "campus-connect.rhul.ac.uk") {
                //alert("Domain: " + document.domain);  
                username_field = document.getElementById("user");
                password_field = document.getElementById("pass");
                flag = true;

                submit_field = document.getElementById("login_btn");
                submitField_found = true;
            }

            //If a form has been found and searched, but found  not to contain at least a username and a password, and provided that the current page still has more forms, then continue searching other forms. 
            if ((flag == false) && (formCounter < forms.length))
                continue Forms_Loop;



            //alert("Highlighting phase now..." + flag);
            if ((username_field != "") && (password_field != "") && (flag)) {
                username_field.style.borderColor = "green";
                username_field.style.borderStyle = "inset";
                username_field.style.backgroundColor = "lightgreen";
                //username_field.value = "Haitham";
                //alert("UserName Highlighted");
                //username_field.style.background="url("+PassCardLogo_HTTPS+")";
                password_field.style.borderColor = "green";
                password_field.style.borderStyle = "inset";
                password_field.style.backgroundColor = "lightgreen";
                //password_field.value = "pass";
                //alert("Password Highlighted");
                //password_field.style.background="url("+PassCardLogo_HTTPS+")";
                //submit_field.style.background="url("+PassCardLogo_HTTPS+")";
                //alert(document.forms[formCounter].action);
            }
            else {
                //alert("I'm terminating now!");
                return; //If the web page does not have a password field, then just simply return, i.e. skip the rest of the code.
            }
            //Terminate (after highlighting) the user script if the login field has not been found. 			
            if (submitField_found == false) {
                alert("We've found the username and password fields, but we didn't find a login field. Exiting now ...");
                return;
            }

            //Handle the Facebook 'special' case
            if ((submit_field != "") && (flag) && (password_field != "") && (submitField_found)) {
                //var Facebook="http://www.facebook.com/", Facebook_NoWWW = "http://facebook.com/",Facebook_Index = "http://www.facebook.com/index.php",Facebook_Index_NoWWW = "http://facebook.com/index.php",Login_Page="", FacebookLoginPage_HTTP="http://www.facebook.com/login.php",FacebookLoginPage_HTTPS="https://login.facebook.com/login.php";
                if (Facebook == Login_Page || Facebook_NoWWW == Login_Page || Facebook_Index == Login_Page || Facebook_Index_NoWWW == Login_Page) {
                    //alert("Facebook 'special' case");
                    //var elm_parentt = submit_field.parentNode;
                    var elm_parentt = password_field.parentNode;
                    var divv = document.createElement("div");
                    divv.innerHTML = '<a href="' + MyWebPage + '?PassCard.targetURL=' + FacebookLoginPage_HTTPS + '&PassCard.ns=' + PassCard_ns + '"><img border=0 alt="Click me to use a PassCard!" title="Click me to use a PassCard!" width="140" height="70" onclick="" src="' + PassCardLogo_HTTPS + '"/></a>'; //The fact that we are fetching the CardSpace logo form a non-SSL (non-https) websites might cause us problems with ssl/https websites					
                    //divv.innerHTML = '<a href="'+FacebookLoginPage_HTTPS+'"><img border=0 alt="Click me to use a PassCard!" title="Click me to use a PassCard!" width="140" height="70"  src="https://www.myopenid.com/static/InformationCards/images/infocard_30x21.png"/></a>'; 						
                    //elm_parentt.insertBefore(divv, submit_field);
                    elm_parentt.insertBefore(divv, password_field.nextSibling);
                    return;
                }
            }
            //Support for https-based websites						
            if ((username_field != "") && (password_field != "") && (submit_field != "") && (flag)) {
                var protocol = document.location.protocol;
                //protocol = "https";
                if ((protocol == "https") || (protocol.substring(0, 5) == "https")) {
                    var Queryparams = "", queryParam = "", Username_Received_Encrypted = "", Password_Received_Encrypted = "", PassCard_ns_Received = "";
                    Queryparams = location.search;
                    if ((Queryparams != null) && (Queryparams != "")) {
                        //if(HTTP_Referrer_field() == )
                        //alert("You've been redirected from: "+HTTP_Referrer_field());
                        //alert(document.referrer);
                        //return;
                        //In websites such as localhost, and Microsoft Research(IDtrust2010), if the plug-in submits the wrong username and password, the plug-in keeps submitting them forever, potentially causing DoS attacks against the website, or getting the user account locked!  This is possibly due to the fact that such websites still presents the same URL with same falg. The HTTP referrer field has been attempted, but it did not work. Fortunately, this is issue has been addressed using short-lived cookies that will simply cause the PassCard to terminate if the wrong credentials have been submitted. 
                        // function set_Shortlived_Cookie(name, value, seconds) {

                        // if (typeof (seconds) != 'undefined') {
                        // var date = new Date();
                        // date.setTime(date.getTime() + (seconds * 1000));
                        // var expires = "; expires=" + date.toGMTString();
                        // }
                        // else {
                        // var expires = "";
                        // }

                        // document.cookie = name + "=" + value + expires + "; path=/";
                        // }

                        //alert("Queryparams: "+Queryparams);

                        //alert(document.location.hostname);
                        var omanssl = document.location.hostname;
                        omanssl = omanssl.toLowerCase();
                        if (omanssl == "ccp.my-hosting-panel.com") {
                            Queryparams = unescape(Queryparams);
                            //alert(Queryparams);
                            queryParam = Queryparams.substring(35);
                            //alert("OmanSSL queryParam is:\n "+queryParam);
                        }
                        else {
                            queryParam = Queryparams.substring(1);
                        }
                        var qs2 = new Querystring(unescape(queryParam));
                        var Username_Received_Encrypted = qs2.get("PassCard.identifier");
                        //alert(unescape(Username_Received_Encrypted));
                        var Password_Received_Encrypted = qs2.get("PassCard.verifier");
                        var PassCard_ns_Received = qs2.get("PassCard.ns");
                        //alert("Username_Received_Encrypted: "+Username_Received_Encrypted+"\n"+"Password_Received_Encrypted: "+Password_Received_Encrypted+"\n"+"PassCard_ns_Received: "+PassCard_ns_Received);
                        if ((Username_Received_Encrypted != "") && (Username_Received_Encrypted != null) && (Password_Received_Encrypted != "") && (Password_Received_Encrypted != null) && (PassCard_ns_Received != "") && (PassCard_ns_Received != null) && (PassCard_ns_Received == PassCard_ns)) {

                            if (((getCookie("PassCard.checkAuth")) != "") && ((getCookie("PassCard.checkAuth")) == "PassCard.authFail")) {
                                alert("The PassCard plug-in has submitted your username and password; however you appear to have the wrong credentials, and hence PassCard will terminate now, saving you from keeping submitting the wrong credentials continuously, and getting blocked out eventually. Kindly wait 10 seconds, and then start a new webpage, ensuring that you submit the correct PassCard containing the correct username-password. ");
                                alert("The PassCard plug-in will now attempt to close your current webpage tap, please click �Yes� when/if asked. Thank you for your co-operation.");
                                window.close();
                                return;
                            }


                            //Crypto Stuff		
                            //The implementaion of the AES encryption is taken from the 'PasswordMaker' open source project. See: http://passwordmaker.org/ Many thanks to the 'PasswordMaker' team!
                            // scripts/aes.js

                            /* rijndael.js      Rijndael Reference Implementation
                            Copyright (c) 2001 Fritz Schneider
                            See http://www-cse.ucsd.edu/~fritz/rijndael.html 
                            */

                            // Rijndael parameters --  Valid values are 128, 192, or 256

                            var keySizeInBits = 256;
                            var blockSizeInBits = 128;

                            ///////  You shouldn't have to modify anything below this line except for
                            ///////  the function getRandomBytes().
                            //
                            // Note: in the following code the two dimensional arrays are indexed as
                            //       you would probably expect, as array[row][column]. The state arrays
                            //       are 2d arrays of the form state[4][Nb].


                            // The number of rounds for the cipher, indexed by [Nk][Nb]
                            var roundsArray = [, , , , [, , , , 10, , 12, , 14], ,
												[, , , , 12, , 12, , 14], ,
												[, , , , 14, , 14, , 14]];

                            // The number of bytes to shift by in shiftRow, indexed by [Nb][row]
                            var shiftOffsets = [, , , , [, 1, 2, 3], , [, 1, 2, 3], , [, 1, 3, 4]];

                            // The round constants used in subkey expansion
                            var Rcon = [
						0x01, 0x02, 0x04, 0x08, 0x10, 0x20,
						0x40, 0x80, 0x1b, 0x36, 0x6c, 0xd8,
						0xab, 0x4d, 0x9a, 0x2f, 0x5e, 0xbc,
						0x63, 0xc6, 0x97, 0x35, 0x6a, 0xd4,
						0xb3, 0x7d, 0xfa, 0xef, 0xc5, 0x91];

                            // Precomputed lookup table for the SBox
                            var SBox = [
						 99, 124, 119, 123, 242, 107, 111, 197, 48, 1, 103, 43, 254, 215, 171,
						118, 202, 130, 201, 125, 250, 89, 71, 240, 173, 212, 162, 175, 156, 164,
						114, 192, 183, 253, 147, 38, 54, 63, 247, 204, 52, 165, 229, 241, 113,
						216, 49, 21, 4, 199, 35, 195, 24, 150, 5, 154, 7, 18, 128, 226,
						235, 39, 178, 117, 9, 131, 44, 26, 27, 110, 90, 160, 82, 59, 214,
						179, 41, 227, 47, 132, 83, 209, 0, 237, 32, 252, 177, 91, 106, 203,
						190, 57, 74, 76, 88, 207, 208, 239, 170, 251, 67, 77, 51, 133, 69,
						249, 2, 127, 80, 60, 159, 168, 81, 163, 64, 143, 146, 157, 56, 245,
						188, 182, 218, 33, 16, 255, 243, 210, 205, 12, 19, 236, 95, 151, 68,
						23, 196, 167, 126, 61, 100, 93, 25, 115, 96, 129, 79, 220, 34, 42,
						144, 136, 70, 238, 184, 20, 222, 94, 11, 219, 224, 50, 58, 10, 73,
						  6, 36, 92, 194, 211, 172, 98, 145, 149, 228, 121, 231, 200, 55, 109,
						141, 213, 78, 169, 108, 86, 244, 234, 101, 122, 174, 8, 186, 120, 37,
						 46, 28, 166, 180, 198, 232, 221, 116, 31, 75, 189, 139, 138, 112, 62,
						181, 102, 72, 3, 246, 14, 97, 53, 87, 185, 134, 193, 29, 158, 225,
						248, 152, 17, 105, 217, 142, 148, 155, 30, 135, 233, 206, 85, 40, 223,
						140, 161, 137, 13, 191, 230, 66, 104, 65, 153, 45, 15, 176, 84, 187,
						 22];

                            // Precomputed lookup table for the inverse SBox
                            var SBoxInverse = [
						 82, 9, 106, 213, 48, 54, 165, 56, 191, 64, 163, 158, 129, 243, 215,
						251, 124, 227, 57, 130, 155, 47, 255, 135, 52, 142, 67, 68, 196, 222,
						233, 203, 84, 123, 148, 50, 166, 194, 35, 61, 238, 76, 149, 11, 66,
						250, 195, 78, 8, 46, 161, 102, 40, 217, 36, 178, 118, 91, 162, 73,
						109, 139, 209, 37, 114, 248, 246, 100, 134, 104, 152, 22, 212, 164, 92,
						204, 93, 101, 182, 146, 108, 112, 72, 80, 253, 237, 185, 218, 94, 21,
						 70, 87, 167, 141, 157, 132, 144, 216, 171, 0, 140, 188, 211, 10, 247,
						228, 88, 5, 184, 179, 69, 6, 208, 44, 30, 143, 202, 63, 15, 2,
						193, 175, 189, 3, 1, 19, 138, 107, 58, 145, 17, 65, 79, 103, 220,
						234, 151, 242, 207, 206, 240, 180, 230, 115, 150, 172, 116, 34, 231, 173,
						 53, 133, 226, 249, 55, 232, 28, 117, 223, 110, 71, 241, 26, 113, 29,
						 41, 197, 137, 111, 183, 98, 14, 170, 24, 190, 27, 252, 86, 62, 75,
						198, 210, 121, 32, 154, 219, 192, 254, 120, 205, 90, 244, 31, 221, 168,
						 51, 136, 7, 199, 49, 177, 18, 16, 89, 39, 128, 236, 95, 96, 81,
						127, 169, 25, 181, 74, 13, 45, 229, 122, 159, 147, 201, 156, 239, 160,
						224, 59, 77, 174, 42, 245, 176, 200, 235, 187, 60, 131, 83, 153, 97,
						 23, 43, 4, 126, 186, 119, 214, 38, 225, 105, 20, 99, 85, 33, 12,
						125];

                            // This method circularly shifts the array left by the number of elements
                            // given in its parameter. It returns the resulting array and is used for 
                            // the ShiftRow step. Note that shift() and push() could be used for a more 
                            // elegant solution, but they require IE5.5+, so I chose to do it manually. 

                            function cyclicShiftLeft(theArray, positions) {
                                var temp = theArray.slice(0, positions);
                                theArray = theArray.slice(positions).concat(temp);
                                return theArray;
                            }

                            // Cipher parameters ... do not change these
                            var Nk = keySizeInBits / 32;
                            var Nb = blockSizeInBits / 32;
                            var Nr = roundsArray[Nk][Nb];

                            // Multiplies the element "poly" of GF(2^8) by x. See the Rijndael spec.

                            function xtime(poly) {
                                poly <<= 1;
                                return ((poly & 0x100) ? (poly ^ 0x11B) : (poly));
                            }

                            // Multiplies the two elements of GF(2^8) together and returns the result.
                            // See the Rijndael spec, but should be straightforward: for each power of
                            // the indeterminant that has a 1 coefficient in x, add y times that power
                            // to the result. x and y should be bytes representing elements of GF(2^8)

                            function mult_GF256(x, y) {
                                var bit, result = 0;

                                for (bit = 1; bit < 256; bit *= 2, y = xtime(y)) {
                                    if (x & bit)
                                        result ^= y;
                                }
                                return result;
                            }

                            // Performs the substitution step of the cipher. State is the 2d array of
                            // state information (see spec) and direction is string indicating whether
                            // we are performing the forward substitution ("encrypt") or inverse 
                            // substitution (anything else)

                            function byteSub(state, direction) {
                                var S;
                                if (direction == "encrypt")           // Point S to the SBox we're using
                                    S = SBox;
                                else
                                    S = SBoxInverse;
                                for (var i = 0; i < 4; i++)           // Substitute for every byte in state
                                    for (var j = 0; j < Nb; j++)
                                        state[i][j] = S[state[i][j]];
                            }

                            // Performs the row shifting step of the cipher.

                            function shiftRow(state, direction) {
                                for (var i = 1; i < 4; i++)               // Row 0 never shifts
                                    if (direction == "encrypt")
                                        state[i] = cyclicShiftLeft(state[i], shiftOffsets[Nb][i]);
                                    else
                                        state[i] = cyclicShiftLeft(state[i], Nb - shiftOffsets[Nb][i]);

                            }

                            // Performs the column mixing step of the cipher. Most of these steps can
                            // be combined into table lookups on 32bit values (at least for encryption)
                            // to greatly increase the speed. 

                            function mixColumn(state, direction) {
                                var b = [];                            // Result of matrix multiplications
                                for (var j = 0; j < Nb; j++) {         // Go through each column...
                                    for (var i = 0; i < 4; i++) {        // and for each row in the column...
                                        if (direction == "encrypt")
                                            b[i] = mult_GF256(state[i][j], 2) ^          // perform mixing
									   mult_GF256(state[(i + 1) % 4][j], 3) ^
									   state[(i + 2) % 4][j] ^
									   state[(i + 3) % 4][j];
                                        else
                                            b[i] = mult_GF256(state[i][j], 0xE) ^
									   mult_GF256(state[(i + 1) % 4][j], 0xB) ^
									   mult_GF256(state[(i + 2) % 4][j], 0xD) ^
									   mult_GF256(state[(i + 3) % 4][j], 9);
                                    }
                                    for (var i = 0; i < 4; i++)          // Place result back into column
                                        state[i][j] = b[i];
                                }
                            }

                            // Adds the current round key to the state information. Straightforward.

                            function addRoundKey(state, roundKey) {
                                for (var j = 0; j < Nb; j++) {                 // Step through columns...
                                    state[0][j] ^= (roundKey[j] & 0xFF);         // and XOR
                                    state[1][j] ^= ((roundKey[j] >> 8) & 0xFF);
                                    state[2][j] ^= ((roundKey[j] >> 16) & 0xFF);
                                    state[3][j] ^= ((roundKey[j] >> 24) & 0xFF);
                                }
                            }

                            // This function creates the expanded key from the input (128/192/256-bit)
                            // key. The parameter key is an array of bytes holding the value of the key.
                            // The returned value is an array whose elements are the 32-bit words that 
                            // make up the expanded key.

                            function keyExpansion(key) {
                                var expandedKey = new Array();
                                var temp;

                                // in case the key size or parameters were changed...
                                Nk = keySizeInBits / 32;
                                Nb = blockSizeInBits / 32;
                                Nr = roundsArray[Nk][Nb];

                                for (var j = 0; j < Nk; j++)     // Fill in input key first
                                    expandedKey[j] =
							  (key[4 * j]) | (key[4 * j + 1] << 8) | (key[4 * j + 2] << 16) | (key[4 * j + 3] << 24);

                                // Now walk down the rest of the array filling in expanded key bytes as
                                // per Rijndael's spec
                                for (j = Nk; j < Nb * (Nr + 1); j++) {    // For each word of expanded key
                                    temp = expandedKey[j - 1];
                                    if (j % Nk == 0)
                                        temp = ((SBox[(temp >> 8) & 0xFF]) |
									   (SBox[(temp >> 16) & 0xFF] << 8) |
									   (SBox[(temp >> 24) & 0xFF] << 16) |
									   (SBox[temp & 0xFF] << 24)) ^ Rcon[Math.floor(j / Nk) - 1];
                                    else if (Nk > 6 && j % Nk == 4)
                                        temp = (SBox[(temp >> 24) & 0xFF] << 24) |
									 (SBox[(temp >> 16) & 0xFF] << 16) |
									 (SBox[(temp >> 8) & 0xFF] << 8) |
									 (SBox[temp & 0xFF]);
                                    expandedKey[j] = expandedKey[j - Nk] ^ temp;
                                }
                                return expandedKey;
                            }

                            // Rijndael's round functions... 

                            function Round(state, roundKey) {
                                byteSub(state, "encrypt");
                                shiftRow(state, "encrypt");
                                mixColumn(state, "encrypt");
                                addRoundKey(state, roundKey);
                            }

                            function InverseRound(state, roundKey) {
                                addRoundKey(state, roundKey);
                                mixColumn(state, "decrypt");
                                shiftRow(state, "decrypt");
                                byteSub(state, "decrypt");
                            }

                            function FinalRound(state, roundKey) {
                                byteSub(state, "encrypt");
                                shiftRow(state, "encrypt");
                                addRoundKey(state, roundKey);
                            }

                            function InverseFinalRound(state, roundKey) {
                                addRoundKey(state, roundKey);
                                shiftRow(state, "decrypt");
                                byteSub(state, "decrypt");
                            }


                            // decrypt is the basic decryption function. It takes parameters
                            // block, an array of bytes representing a ciphertext block, and expandedKey,
                            // an array of words representing the expanded key previously returned by
                            // keyExpansion(). The decrypted block is returned as an array of bytes.

                            function decrypt(block, expandedKey) {
                                var i;
                                if (!block || block.length * 8 != blockSizeInBits)
                                    return;
                                if (!expandedKey)
                                    return;

                                block = packBytes(block);
                                InverseFinalRound(block, expandedKey.slice(Nb * Nr));
                                for (i = Nr - 1; i > 0; i--)
                                    InverseRound(block, expandedKey.slice(Nb * i, Nb * (i + 1)));
                                addRoundKey(block, expandedKey);
                                return unpackBytes(block);
                            }

                            // This method takes a byte array (byteArray) and converts it to a string by
                            // applying String.fromCharCode() to each value and concatenating the result.
                            // The resulting string is returned. Note that this function SKIPS zero bytes
                            // under the assumption that they are padding added in formatPlaintext().
                            // Obviously, do not invoke this method on raw data that can contain zero
                            // bytes. It is really only appropriate for printable ASCII/Latin-1 
                            // values. Roll your own function for more robust functionality :)

                            function byteArrayToString(byteArray) {
                                var result = "";
                                for (var i = 0; i < byteArray.length; i++)
                                    if (byteArray[i] != 0)
                                        result += String.fromCharCode(byteArray[i]);
                                return result;
                            }

                            // This function takes an array of bytes (byteArray) and converts them
                            // to a hexadecimal string. Array element 0 is found at the beginning of 
                            // the resulting string, high nibble first. Consecutive elements follow
                            // similarly, for example [16, 255] --> "10ff". The function returns a 
                            // string.

                            /*var elm_crypto_byteArrayToHex= document.getElementsByTagName("body")[0].appendChild(document.createElement('script'));
                            elm_crypto_byteArrayToHex.setAttribute('language','javascript');
                            elm_crypto_byteArrayToHex.setAttribute('type','text/javascript');
                            elm_crypto_byteArrayToHex.text = [*/
                            function byteArrayToHex(byteArray) {
                                var result = "";
                                if (!byteArray)
                                    return;
                                for (var i = 0; i < byteArray.length; i++)
                                    result += ((byteArray[i] < 16) ? "0" : "") + byteArray[i].toString(16);

                                return result;
                            }

                            // This function converts a string containing hexadecimal digits to an 
                            // array of bytes. The resulting byte array is filled in the order the
                            // values occur in the string, for example "10FF" --> [16, 255]. This
                            // function returns an array. 

                            /*var elm_crypto_hexToByteArray= document.getElementsByTagName("body")[0].appendChild(document.createElement('script'));
                            elm_crypto_hexToByteArray.setAttribute('language','javascript');
                            elm_crypto_hexToByteArray.setAttribute('type','text/javascript');
                            elm_crypto_hexToByteArray.text = [*/
                            function hexToByteArray(hexString) {
                                var byteArray = [];
                                if (hexString.length % 2)             // must have even length
                                    return;
                                if (hexString.indexOf("0x") == 0 || hexString.indexOf("0X") == 0)
                                    hexString = hexString.substring(2);
                                for (var i = 0; i < hexString.length; i += 2)
                                    byteArray[Math.floor(i / 2)] = parseInt(hexString.slice(i, i + 2), 16);
                                return byteArray;
                            }
                            //];

                            // This function packs an array of bytes into the four row form defined by
                            // Rijndael. It assumes the length of the array of bytes is divisible by
                            // four. Bytes are filled in according to the Rijndael spec (starting with
                            // column 0, row 0 to 3). This function returns a 2d array.

                            function packBytes(octets) {
                                var state = new Array();
                                if (!octets || octets.length % 4)
                                    return;

                                state[0] = new Array(); state[1] = new Array();
                                state[2] = new Array(); state[3] = new Array();
                                for (var j = 0; j < octets.length; j += 4) {
                                    state[0][j / 4] = octets[j];
                                    state[1][j / 4] = octets[j + 1];
                                    state[2][j / 4] = octets[j + 2];
                                    state[3][j / 4] = octets[j + 3];
                                }
                                return state;
                            }

                            // This function unpacks an array of bytes from the four row format preferred
                            // by Rijndael into a single 1d array of bytes. It assumes the input "packed"
                            // is a packed array. Bytes are filled in according to the Rijndael spec. 
                            // This function returns a 1d array of bytes.

                            function unpackBytes(packed) {
                                var result = new Array();
                                for (var j = 0; j < packed[0].length; j++) {
                                    result[result.length] = packed[0][j];
                                    result[result.length] = packed[1][j];
                                    result[result.length] = packed[2][j];
                                    result[result.length] = packed[3][j];
                                }
                                return result;
                            }

                            // This function takes a prospective plaintext (string or array of bytes)
                            // and pads it with zero bytes if its length is not a multiple of the block 
                            // size. If plaintext is a string, it is converted to an array of bytes
                            // in the process. The type checking can be made much nicer using the 
                            // instanceof operator, but this operator is not available until IE5.0 so I 
                            // chose to use the heuristic below. 

                            function formatPlaintext(plaintext) {
                                var bpb = blockSizeInBits / 8;               // bytes per block
                                var i;

                                // if primitive string or String instance
                                if (typeof plaintext == "string" || plaintext.indexOf) {
                                    plaintext = plaintext.split("");
                                    // Unicode issues here (ignoring high byte)
                                    for (i = 0; i < plaintext.length; i++)
                                        plaintext[i] = plaintext[i].charCodeAt(0) & 0xFF;
                                }

                                for (i = bpb - (plaintext.length % bpb); i > 0 && i < bpb; i--)
                                    plaintext[plaintext.length] = 0;

                                return plaintext;
                            }

                            // Returns an array containing "howMany" random bytes. YOU SHOULD CHANGE THIS
                            // TO RETURN HIGHER QUALITY RANDOM BYTES IF YOU ARE USING THIS FOR A "REAL"
                            // APPLICATION.

                            function getRandomBytes(howMany) {
                                var i;
                                var bytes = new Array();
                                for (i = 0; i < howMany; i++)
                                    bytes[i] = Math.round(Math.random() * 255);
                                return bytes;
                            }

                            // rijndaelDecrypt(ciphertext, key, mode)
                            // Decrypts the using the given key and mode. The parameter "ciphertext" 
                            // must be an array of bytes. The parameter "key" must be an array of key 
                            // bytes. If you have a hex string representing the ciphertext or key, 
                            // invoke hexToByteArray() on it to convert it to an array of bytes. The
                            // parameter "mode" is a string, either "CBC" or "ECB".
                            // 
                            // An array of bytes representing the plaintext is returned. To convert 
                            // this array to a hex string, invoke byteArrayToHex() on it. To convert it 
                            // to a string of characters, you can use byteArrayToString().

                            function rijndaelDecrypt(ciphertext, key, mode) {
                                var expandedKey;
                                var bpb = blockSizeInBits / 8;          // bytes per block
                                var pt = new Array();                   // plaintext array
                                var aBlock;                             // a decrypted block
                                var block;                              // current block number

                                if (!ciphertext || !key || typeof ciphertext == "string")
                                    return;
                                if (key.length * 8 != keySizeInBits)
                                    return;
                                if (!mode)
                                    mode = "ECB";                         // assume ECB if mode omitted

                                expandedKey = keyExpansion(key);

                                // work backwards to accomodate CBC mode 
                                for (block = (ciphertext.length / bpb) - 1; block > 0; block--) {
                                    aBlock =
							 decrypt(ciphertext.slice(block * bpb, (block + 1) * bpb), expandedKey);
                                    if (mode == "CBC")
                                        for (var i = 0; i < bpb; i++)
                                            pt[(block - 1) * bpb + i] = aBlock[i] ^ ciphertext[(block - 1) * bpb + i];
                                    else
                                        pt = aBlock.concat(pt);
                                }

                                // do last block if ECB (skips the IV in CBC)
                                if (mode == "ECB")
                                    pt = decrypt(ciphertext.slice(0, bpb), expandedKey).concat(pt);

                                return pt;
                            }

                            if ((Username_Received_Encrypted != null) && (Username_Received_Encrypted != "") && (Password_Received_Encrypted != null) && (Password_Received_Encrypted != "") && (key != null) && (key != "") && (key != "undefined") && (encryptionMode != null) && (encryptionMode != "") && (encryptionMode != "undefined")) {
                                var Username_Received = byteArrayToString(rijndaelDecrypt(hexToByteArray(unescape(Username_Received_Encrypted)), hexToByteArray(key), encryptionMode));
                                var Password_Received = byteArrayToString(rijndaelDecrypt(hexToByteArray(unescape(Password_Received_Encrypted)), hexToByteArray(key), encryptionMode));
                            }
                            else {
                                alert("Unable to perform the AES-Decryption process, please contact the PassCard developer: Haitham Al-Sinani (oman4ever.org). The plug-in will terminate now ...");
                                return;
                            }
                            //alert("Just before submitting the username-password values!");
                            if ((Username_Received != null) && (Username_Received != "") && (Password_Received != null) && (Password_Received != "")) {
                                //alert("Username: "+Username_Received);
                                username_field.value = Username_Received;
                                password_field.value = Password_Received;
                                //When some websites, notably https://nac.rhul.ac.uk/authentication/, are provided with wrong credentials, they do not redirect the user to a new webpage, instead they just respond to the user on the same webpage. The PassCard plug-in will therefore  be run again, and will see the same URL with the same query parameters, and will  thus attempt to sign the user in again with same wrong credentials, the website will refuse access once again ... and the process will continue forever. To address this issue, a short-lived cookie is created (just before attempting to auto-sign the user in for the first time) to check that the plug-in does not attempt to log the user in more than once in a certain period of time (e.g. 3 seconds). Indeed, if the plug-in discovers that the user has already been signed in but denied access, then it terminates and also closes the webpage, after obtaining permission from the user. This termination is based on the assumption that user has either provided the wrong credentials on the current PassCard or simply has selected the wrong PassCard. This termination also helps to save the user from either being caught in an infinite loop or from getting blocked out by the visited site.
                                set_Shortlived_Cookie("PassCard.checkAuth", "PassCard.authFail", 10); //6 = three seconds
                                submit_field.click();
                                return;
                            }
                            else {
                                alert("Unable to recover the username-password values after successfully performing the AES-Decryption process, please contact the PassCard developer: Haitham Al-Sinani (oman4ever.org). The plug-in will terminate now ...");
                                return;
                            }

                            return;

                        }

                    }
                    //alert(getCookie("PassCard.checkLogo"));
                    if (getCookie("PassCard.checkLogo") != null && getCookie("PassCard.checkLogo") == "PassCard.LogoAdded" && getCookie("PassCard.checkLogo") != "")
                        return;
                    //{ 
                    Desired_HTTPS_based_website = Login_Page;
                    //alert(Desired_HTTPS_based_website);
                    //Insert the CardSpace logo above the submit field.		
                    var elm_parentt = submit_field.parentNode;
                    var divv = document.createElement("div");

                    if (Desired_HTTPS_based_website == 'https://nac.rhul.ac.uk/authentication/')
                        divv.innerHTML = '<a href="' + localhost + '?PassCard.targetURL=' + Desired_HTTPS_based_website + '&PassCard.ns=' + PassCard_ns + '"><img border=0 alt="Click me to use PassCard!" width="140" height="70" onclick="" src="' + PassCardLogo_HTTPS + '"/></a>'; //The fact that we are fetching the CardSpace logo form a non-SSL (non-https) websites might cause us problems with ssl/https websites					
                    else if (Desired_HTTPS_based_website == 'https://twitter.com/sessions') //Special case for Twitter
                    {
                        //alert("Twitter Special Case");
                        divv.innerHTML = '<a href="' + MyWebPage + '?PassCard.targetURL=https://twitter.com/&PassCard.ns=' + PassCard_ns + '"><img border=0 alt="Click me to use PassCard!" title="Click me to use PassCard!" width="140" height="70" onclick="" src="' + PassCardLogo_HTTPS + '"/></a>'; //The fact that we are fetching the CardSpace logo form a non-SSL (non-https) websites might cause us problems with ssl/https websites					

                    }
                    else if (document.location.href.indexOf(";") != -1) //Special case for websites that have the ';' character in their URL, e.g. https://admin.1and1.co.uk/xml/config/Login;jsessionid=2015B6857196721AEE2EBE0ADD3E6ACB.TCpfix85a
                    {

                        Desired_HTTPS_based_website = document.location.href.substring(0, document.location.href.indexOf(";"));
                        divv.innerHTML = '<a href="' + MyWebPage + '?PassCard.targetURL=' + Desired_HTTPS_based_website + '&PassCard.ns=' + PassCard_ns + '"><img border=0 alt="Click me to use PassCard!" title="Click me to use PassCard!" width="140" height="70" onclick="" src="' + PassCardLogo_HTTPS + '"/></a>'; //The fact that we are fetching the CardSpace logo form a non-SSL (non-https) websites might cause us problems with ssl/https websites					

                    }
                    else if ((document.location.href == "https://www.facebook.com/login.php") || (document.location.href.substring(0, document.location.href.indexOf("?")) == "https://www.facebook.com/login.php"))//Special case for https-based facebook
                    {
                        //alert("Facebook (https) ");
                        divv.innerHTML = '<a href="' + MyWebPage + '?PassCard.targetURL=' + Desired_HTTPS_based_website + '&PassCard.ns=' + PassCard_ns + '"><img border=0 alt="Click me to use PassCard!" title="Click me to use PassCard!" width="140" height="70" onclick="" src="' + PassCardLogo_HTTPS + '"/></a>'; //The fact that we are fetching the CardSpace logo form a non-SSL (non-https) websites might cause us problems with ssl/https websites					
                        elm_parentt = password_field.parentNode;
                        elm_parentt.insertBefore(divv, password_field.nextSibling);
                        set_Shortlived_Cookie("PassCard.checkLogo", "PassCard.LogoAdded", 5);
                        return;

                    }
                    else {
                        //var PassCard_URL = MyWebPage+'?PassCard.targetURL='+Desired_HTTPS_based_website+'&PassCard.ns='+PassCard_ns;
                        //alert("PassCard_URL: "+ PassCard_URL);
                        //alert("site: "+document.location.href);
                        //return;
                        divv.innerHTML = '<a href="' + MyWebPage + '?PassCard.targetURL=' + Desired_HTTPS_based_website + '&PassCard.ns=' + PassCard_ns + '"><img border=0 alt="Click me to use PassCard!" title="Click me to use PassCard!" width="140" height="70" onclick="" src="' + PassCardLogo_HTTPS + '"/></a>'; //The fact that we are fetching the CardSpace logo form a non-SSL (non-https) websites might cause us problems with ssl/https websites					

                    }
                    elm_parentt.insertBefore(divv, submit_field);
                    set_Shortlived_Cookie("PassCard.checkLogo", "PassCard.LogoAdded", 5);
                    return;
                    //}
                    /*prompt("User: ","Haitham");
                    var userURL=prompt("Please enter, (or simply just copy and paste) the full URL of a login page of a website that you trust. The website that you enter must show a login form, and must start with http. E.g. http://www.oman4ever.org/adminlogin.jsp","Harry Potter");
                    if (userURL!=null && userURL!="")
                    {
                    alert("Thanks! "+ userURL);
                    }*/

                }
            }

            //Add an object tag inside the famous HTML <head> tag
            //var elm = document.getElementById("head");
            var elm_object = document.getElementsByTagName("head")[0].appendChild(document.createElement('div')); //Food for thought: try this: elm = document.getElementsByTagName("head")[0].appendChild(document.createElement('object'));	
            elm_object.innerHTML = '<object type="application/x-informationcard" id="_xmlToken" name="_xmlToken"><param name="tokenType" value="urn:oasis:names:tc:SAML:1.0:assertion" /> <param name="requiredClaims" value="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"/><param name="optionalClaims" value="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/webpage"/></object>';


            //Create a function, Interecept_Token(), to interecept the xml token sent by CardSpace Identity Selector in the <head> section of the html page.
            var elm = document.getElementsByTagName("head")[0].appendChild(document.createElement("script"));
            elm.setAttribute("language", "javascript");
            elm.setAttribute("type", "text/javascript");
            elm.text = [function Interecept_Token() {
                var xmlToken_value = null, thehiddeninput = null;
                //alert("Interecept_Token() is called!");
                //xmlToken_value = document.getElementById("_xmltoken"); //This will NOT work, because the "id" here is '_xmltoken' and the id in the object tag is '_xmlToken'. It�s interesting to note that some websites, e.g. RHUL portal and Google, would still work here on Win 7
                xmlToken_value = document.getElementById("_xmlToken"); //The statement "xmlToken_value.value" results in CardSpace being invoked!
                //alert("xmlToken_value: can you see me? " + xmlToken_value);
                thehiddeninput = document.getElementById("xmltoken");
                //alert("thehiddeninput.value:    " + thehiddeninput.value);
                thehiddeninput.value = xmlToken_value.value; //The statement "xmlToken_value.value" results in CardSpace being invoked!
                //thehiddeninput.value = xmlToken_value;//This also works; tried with rhul portal + Google
                //alert(" xmlToken_value.value: " + thehiddeninput.value);
                //alert("V for Victory!");
                //var xmltkn_value = thehiddeninput.value;
                //Output a friendly error message should an error is encountered or should the user clicks 'cancel'!							
                //if((xmltkn_value == null) || (xmltkn_value == "") || (!xmltkn_value) )
                /*if(xmltkn_value == "")
                {
                alert("Sorry, either you have cancelled the Id Selector, or an unexpected error has just occurred. Please refresh the current page, and try again. Thanks!");
                }*/
                //alert("Interecept_Token() is called! till the end!");
                //return;
                Credential_Filler();
            } ];
            //Create a function,Credential_Filler(), to parse the xmlToken, obtain credetial values, auto fill the form, and possibly to auto submit the form  										
            var elm = document.getElementsByTagName("head")[0].appendChild(document.createElement('script'));
            elm.setAttribute('language', 'javascript');
            elm.setAttribute('type', 'text/javascript');
            elm.text = [function Credential_Filler() {
                var thehiddeninput = document.getElementById("xmltoken");
                var txtXML = thehiddeninput.value;
                //alert("xmlToken:	"+txtXML);
                var readyToSubmit = false;
                function loadXMLString(txt) {
                    try //Internet Explorer
							{
                        xmlDoc = new ActiveXObject("Microsoft.XMLDOM");
                        xmlDoc.async = "false";
                        xmlDoc.loadXML(txt);
                        return xmlDoc;
                    }
                    catch (e) {
                        try //Firefox, Mozilla, Opera, etc.
								{
                            parser = new DOMParser();
                            xmlDoc = parser.parseFromString(txt, "text/xml");
                            return xmlDoc;
                        }
                        catch (e) { alert(e.message) }
                    }

                    return null;
                }

                xmlDoc = loadXMLString(txtXML);
                if (xmlDoc.hasChildNodes())
                    x = xmlDoc.documentElement.childNodes; // It works, and it outputs the correct results :)

                for (i = 0; i < x.length; i++) {
                    var username = "", password = "";
                    if (x.item(i).nodeType == 1) //	//Display only element nodes // You don't need this if statement for IE, but you do need it for other browsers, such as FireFox, etc.
                    {
                        if (i == 0) //If the node element == saml:Conditions
                            continue;

                        var AttrStatement = x.item(i).nodeName;
                        //alert(AttrStatement); //prits out 'saml:AttributeStatement'
                        if (AttrStatement.toLowerCase() == "saml:attributestatement")	//If the element == AttributeStatement (if (i==1))
                        {

                            if (x.item(i).hasChildNodes())
                                AttrStatementChildren = x.item(i).childNodes;
                            Attributestatement_Loop: for (ii = 0; ii < AttrStatementChildren.length; ii++) {
                                if (ii == 0) //if the element == 'saml:Subject'
                                    continue;
                                //alert(AttrStatementChildren.item(ii).nodeName);
                                var AttrName = AttrStatementChildren.item(ii).getAttribute("AttributeName");
                                //alert(AttrName);
                                if (AttrStatementChildren.item(ii).hasChildNodes())
                                    SAML_Atrr = AttrStatementChildren.item(ii).childNodes;
                                //document.write(SAML_Atrr.item(0).nodeName+"<br>");
                                if (SAML_Atrr.item(0).hasChildNodes())
                                    result = SAML_Atrr.item(0).childNodes;
                                //alert(result.item(0).nodeName+"<br>");
                                if (AttrName.toLowerCase() == "givenname")//If the element == FirstName// if(ii == 1)
                                {
                                    username = result.item(0).nodeValue;
                                    //alert(username);
                                }

                                if (AttrName.toLowerCase() == "surname") //If the element == LastName
                                {
                                    password = result.item(0).nodeValue;
                                    //alert(username + "	"+ password);
                                    readyToSubmit = true;

                                }
                                if (AttrName == "webpage") //If the element == LastName
                                {
                                    //alert("webpage"+ readyToSubmit);
                                    var StoredURL = result.item(0).nodeValue;
                                    var Full_StoredURL = StoredURL;

                                    function getHostnameOnly(str) //Many thanks to our reference:	http://beardscratchers.com/journal/using-javascript-to-get-the-hostname-of-a-url
                                    {
                                        var re = new RegExp('^(?:f|ht)tp(?:s)?\://([^/]+)', 'im');
                                        return str.match(re)[1].toString();
                                    }

                                    var HTTPS_CPM_2 = getCookie('PassCard.HTTPS');
                                    if (HTTPS_CPM_2 == "")//Activate HTTP-based CPM
                                    {
                                        //Compare full URL's to fight phishing! Just in case the login page has been moved somewhere else within the domain itself, then just compare the hostnames only 			
                                        var Current_Full_URL = window.location.href;
                                        var Current_Hostname = window.location.hostname;
                                        var Current_Host = document.location.host;
                                        //Special case for RHUL portal --- //Problem with the RHUL: sometimes, it is with http://campus-connect.rhul.ac.uk/ and someother times, it is with: http://portal.rhul.ac.uk/
                                        if (Current_Full_URL == "http://campus-connect.rhul.ac.uk/")
                                            Current_Full_URL = "http://portal.rhul.ac.uk/";

                                        if (StoredURL.substring(0, 7) != "http://")
                                            StoredURL = "http://" + StoredURL;
                                        var StoredURL_hostname = getHostnameOnly(StoredURL);
                                        var CurrentURL_hostname = getHostnameOnly(Current_Full_URL);
                                        //alert("StoredURL_hostname:	"+StoredURL_hostname+"CurrentURL_hostname:	"+CurrentURL_hostname+"	location.hostname	"+window.location.hostname);
                                        if ((Full_StoredURL == Current_Full_URL) || (Full_StoredURL == Current_Hostname) || (Full_StoredURL == Current_Host) || (StoredURL == Current_Full_URL) || (StoredURL == Current_Hostname) || (StoredURL == Current_Host) || (StoredURL_hostname == CurrentURL_hostname) || (StoredURL_hostname == Current_Hostname) || (StoredURL_hostname == Current_Host)) {
                                            break Attributestatement_Loop;
                                        }
                                        else {
                                            alert("The URL stored on your card and the URL of the website you are currently visiting do not match! This current website could be a phishing website trying to steal your username and password! Please be very careful!					However, if you think that the login page has been moved to a different location, then please make sure you put the full URL in your card.");
                                            alert("The stored website on your selected card is:	" + StoredURL + "				The full URL of the website you are currently visiting is:	" + Current_Full_URL);
                                            alert("PassCard will terminate now ...");
                                            var cookieName = location.hostname;
                                            deleteCookie(cookieName);
                                            deleteCookie('PassCard.HTTPS'); // This is Very Important
                                            return;
                                        }
                                    }
                                    else {
                                        var cookieName = location.hostname;
                                        var target_HTTPS_Site = getCookie(cookieName);
                                        var targetHostnameOnly = getHostnameOnly(target_HTTPS_Site);
                                        //if(StoredURL.substring(0,8) != "https://")
                                        if ((StoredURL.substring(0, 8) != "https://") && (StoredURL.substring(0, 7) != "http://"))
                                            StoredURL = "https://" + StoredURL;
                                        var StoredURL_hostname_ = getHostnameOnly(StoredURL);
                                        var targetHostnameOnly_noWWW = "";
                                        if ((targetHostnameOnly.substring(0, 4)) == "www.")
                                            targetHostnameOnly_noWWW = targetHostnameOnly.substring(4, targetHostnameOnly.length);
                                        //alert(StoredURL_hostname_ + "==" +targetHostnameOnly);
                                        //alert(Full_StoredURL +"=="+target_HTTPS_Site );
                                        if ((Full_StoredURL == target_HTTPS_Site) || (Full_StoredURL == targetHostnameOnly) || (Full_StoredURL == targetHostnameOnly_noWWW) || (StoredURL == target_HTTPS_Site) || (StoredURL == targetHostnameOnly) || (StoredURL == targetHostnameOnly_noWWW) || (StoredURL_hostname_ == targetHostnameOnly) || (StoredURL_hostname_ == target_HTTPS_Site) || (StoredURL_hostname_ == targetHostnameOnly_noWWW)) {
                                            break Attributestatement_Loop;
                                        }
                                        else {
                                            alert("The URL stored on your card and the URL of the website you are being directed to  do not match! There could be some phishing website trying to steal your username and password! Please be very careful!					However, if you think that the login page has been moved to a different location, then please make sure you put the full URL in your card.");
                                            alert("The stored website on your selected card is:	" + Full_StoredURL + "				The full URL of the website you are being directed to is:	" + target_HTTPS_Site);
                                            alert("PassCard will terminate now ...");
                                            deleteCookie(cookieName);
                                            deleteCookie('PassCard.HTTPS'); // This is Very Important
                                            return;
                                        }

                                    }


                                }
                            }
                            if (readyToSubmit) {
                                //if cookie is on, then do HTTPS-based CPM (Destroy cookie)
                                //else, do HTTP-based CPM
                                //setCookie('PassCard.HTTPS','Activated',1)
                                var HTTPS_CPM_2 = getCookie('PassCard.HTTPS');
                                //alert(HTTPS_CPM_2);
                                if (HTTPS_CPM_2 == "")//Activate HTTP-based CPM
                                {
                                    var flag = false, flag_after = false, UsernameAndPasswordFieldsFound = false;
                                    var usernameField = false, passwordField = false, submitField = false, submitField_found = false;
                                    var username_field = "", password_field = "", submit_field = "", Login_Page = "", queryParameters = "";
                                    function formFiller(username, password) {
                                        var password_order_counter;
                                        var forms = document.getElementsByTagName('form');
                                        if (forms.length > 0) {
                                            Forms_Loop: for (var formCounter = 0; formCounter < forms.length; formCounter++) {
                                                var formName = document.forms[formCounter].name;
                                                //alert(formName);
                                                //return;
                                                if (forms[formCounter].hasChildNodes() != true)
                                                    continue Forms_Loop;
                                                //alert(forms[formCounter].childNodes);
                                                var input_elements = document.forms[formCounter].getElementsByTagName('input');
                                                if (input_elements.length >= 2) //Each form must have at least 2 input fields: username and password. (Note that I did not say '3', because the 'login' field might either be of type ('input' of attribute submit) or of type (image) or of type 'button', etc.)
                                                {
                                                    inputs_Loop: for (var inputLoop_counter = 0; inputLoop_counter < input_elements.length; inputLoop_counter++) {
                                                        var name, _type, _class;
                                                        try { name = input_elements[inputLoop_counter].getAttribute("name") || ""; } catch (e) { };
                                                        try { _type = input_elements[inputLoop_counter].getAttribute("type") || ""; } catch (e) { };
                                                        try { _class = input_elements[inputLoop_counter].getAttribute("class") || ""; } catch (e) { };
                                                        if ((_type.toLowerCase()) == "text") //usernameField?
                                                        {
                                                            username_field = input_elements[inputLoop_counter];
                                                            inputLoop_counter = inputLoop_counter + 1; // Here we add 1 in the hope that the next input field would be the password field; if it is not, then we subtract  1, and resume searching.
                                                            try { name = input_elements[inputLoop_counter].getAttribute("name") || ""; } catch (e) { };
                                                            try { _type = input_elements[inputLoop_counter].getAttribute("type") || ""; } catch (e) { };
                                                            try { _class = input_elements[inputLoop_counter].getAttribute("class") || ""; } catch (e) { };
                                                            //Note that we assume that a password field would immediately follow the username field inside an HTML form; indeed, our entire search depends on this particular assumption
                                                            if ((_type.toLowerCase() == "password") || (_type == "text" && name.toLowerCase().substring(0, 5) == "passw") || (_class.indexOf("mpwdpasswd") > -1)) //passwordField?
                                                            {
                                                                password_field = input_elements[inputLoop_counter];
                                                                flag = true;
                                                                inputLoop_counter = inputLoop_counter + 1;
                                                                var input_image_Loop_counter = inputLoop_counter;
                                                                skipping_Loop: for (inputLoop_counter; inputLoop_counter < input_elements.length; inputLoop_counter++) {

                                                                    try { name = input_elements[inputLoop_counter].getAttribute("name") || ""; } catch (e) { };
                                                                    try { _type = input_elements[inputLoop_counter].getAttribute("type") || ""; } catch (e) { };
                                                                    try { _class = input_elements[inputLoop_counter].getAttribute("class") || ""; } catch (e) { };
                                                                    if ((_type.toLowerCase() == "password") || (_type == "text" && name.toLowerCase().substring(0, 5) == "passw") || (_class.indexOf("mpwdpasswd") > -1)) {
                                                                        //alert("This is a registration page ... exiting!");
                                                                        return;
                                                                    }
                                                                    //alert("IsSubmit?:	"+_type.toLowerCase());
                                                                    if ((_type.toLowerCase()) == "submit") //submitField? A submit field is most commonly of type submit, that's why we started searching for this first.
                                                                    {
                                                                        submit_field = input_elements[inputLoop_counter];
                                                                        submitField_found = true;
                                                                        break skipping_Loop; //Since you have found the username, password and submit fields, then break out of the for loop
                                                                        break inputs_Loop; //This line will not be executed
                                                                    }
                                                                }

                                                                if (document.location.hostname == "mc.manuscriptcentral.com" || document.location.hostname == "aljazeera.net") {
                                                                    if ((flag) && (!submitField_found)) {

                                                                        var a_elements = document.forms[formCounter].getElementsByTagName('a');
                                                                        if (a_elements.length >= 1) {
                                                                            a_Loop: for (var aLoop_counter = 0; aLoop_counter < a_elements.length; aLoop_counter++) {
                                                                                image_elements = a_elements[aLoop_counter].getElementsByTagName('img');
                                                                                if (image_elements.length >= 1) {
                                                                                    //alert("Here I am!");
                                                                                    try { var srcImage = image_elements[0].getAttribute("src") || ""; } catch (e) { };
                                                                                    //alert("srcImage:	" + srcImage);
                                                                                    if (srcImage == "http://mc.manuscriptcentral.com/images/en_US/buttons/log_in.gif" || srcImage == "/Portal/Images/emptyimage.gif") {
                                                                                        //alert("Okay");
                                                                                        submit_field = image_elements[0];
                                                                                        //alert(submit_field);
                                                                                        submitField_found = true;
                                                                                        break a_Loop;
                                                                                        break inputs_Loop; //This last line will not be executed	
                                                                                    }
                                                                                    //submit_field = a_elements[aLoop_counter];


                                                                                }
                                                                            }
                                                                        }
                                                                    }
                                                                }



                                                                //alert("First:	"+submitField_found);
                                                                if ((flag) && (!submitField_found)) {
                                                                    skipping_Loop_inputImage: for (input_image_Loop_counter; input_image_Loop_counter < input_elements.length; input_image_Loop_counter++) {
                                                                        try { _type = input_elements[input_image_Loop_counter].getAttribute("type") || ""; } catch (e) { };
                                                                        if ((_type.toLowerCase()) == "image") //imageSubmitfield?
                                                                        {
                                                                            submit_field = input_elements[input_image_Loop_counter];
                                                                            submitField_found = true;
                                                                            break skipping_Loop_inputImage; //Since you have found the username, password and submit fields, then break out of the for loop
                                                                            break inputs_Loop; //This line will not be executed
                                                                        }

                                                                    }

                                                                }
                                                                //alert("Second:	"+submitField_found);
                                                                if ((flag) && (!submitField_found)) {
                                                                    var a_elements = document.forms[formCounter].getElementsByTagName('a');
                                                                    if (a_elements.length >= 1) {
                                                                        a_Loop: for (var aLoop_counter = 0; aLoop_counter < a_elements.length; aLoop_counter++) {
                                                                            image_elements = a_elements[aLoop_counter].getElementsByTagName('image');
                                                                            if (image_elements.length >= 1) {

                                                                                submit_field = a_elements[aLoop_counter];
                                                                                submitField_found = true;
                                                                                break a_Loop;
                                                                                break inputs_Loop; //This line will not be executed	

                                                                            }
                                                                        }
                                                                    }
                                                                }

                                                                if ((flag) && (!submitField_found)) {
                                                                    var img_elements = forms[formCounter].getElementsByTagName('img');
                                                                    if (img_elements.length >= 1) {
                                                                        img_Loop: for (var imgLoop_counter = 0; imgLoop_counter < img_elements.length; imgLoop_counter++) {
                                                                            if ((image_elements[imgLoop_counter].onclick != "") || (imgLoop_counter == img_elements.length)) {
                                                                                submit_field = image_elements[imgLoop_counter];
                                                                                submitField_found = true;
                                                                                break img_Loop;
                                                                                break inputs_Loop; // I know I know this line will never be executed.

                                                                            }

                                                                        }

                                                                    }

                                                                }

                                                                //If username and password fields were found, but the submit field has not yet been found, try searching for an <a> tag that has its href set to JavaScript:void.							
                                                                //alert(	submitField_found);
                                                                if ((flag) && (!submitField_found)) {
                                                                    var a_elements = document.forms[formCounter].getElementsByTagName('a');
                                                                    if (a_elements.length >= 1) {
                                                                        a_Loop: for (var aLoop_counter = 0; aLoop_counter < a_elements.length; aLoop_counter++) {
                                                                            a_element_herf = a_elements[aLoop_counter].getAttribute('href');
                                                                            a_element_herf = a_element_herf.toLowerCase();
                                                                            //alert(a_element_herf);
                                                                            if (a_element_herf.substring(0, 11) == "javascript:") {
                                                                                //alert("The submit tag is an <a> href tag with its href set to javascript:...");
                                                                                submit_field = a_elements[aLoop_counter];
                                                                                submitField_found = true;
                                                                                break a_Loop;
                                                                                break inputs_Loop; //This line will not be executed
                                                                            }

                                                                        }
                                                                    }

                                                                }
                                                                //If username and password fields  have been found, but the submit field has not yet been found, try searching for an <button> tag of type 'submit' (e.g. https://login.yahoo.com)						
                                                                if ((flag) && (!submitField_found)) {
                                                                    var button_elements = document.forms[formCounter].getElementsByTagName('button');
                                                                    if (button_elements.length >= 1) {
                                                                        button_elements_Loop: for (var buttonLoop_counter = 0; buttonLoop_counter < button_elements.length; buttonLoop_counter++) {
                                                                            var button_element_type = button_elements[buttonLoop_counter].getAttribute('type');
                                                                            //alert(a_element_herf);
                                                                            if (button_element_type.toLowerCase() == "submit") {
                                                                                //alert("The submit tag is a <button>  tag  of type 'submit'");
                                                                                submit_field = button_elements[buttonLoop_counter];
                                                                                submitField_found = true;
                                                                                break button_elements_Loop;
                                                                                break inputs_Loop; //This line will not be executed
                                                                            }

                                                                        }
                                                                    }

                                                                }

                                                                break inputs_Loop;
                                                            }
                                                            inputLoop_counter = inputLoop_counter - 1;
                                                        }

                                                    }
                                                }
                                                else
                                                    continue Forms_Loop;


                                                //Special case for Royal Holloway, University of London
                                                if (document.domain == "campus-connect.rhul.ac.uk") {
                                                    //alert("Domain: " + document.domain);  
                                                    username_field = document.getElementById("user");
                                                    password_field = document.getElementById("pass");
                                                    flag = true;

                                                    submit_field = document.getElementById("login_btn");
                                                    submitField_found = true;
                                                }

                                                if ((flag == false) && (formCounter < forms.length))
                                                    continue Forms_Loop;
                                                if ((username_field) && (password_field) && (flag)) {
                                                    username_field.style.borderColor = "green";
                                                    username_field.style.borderStyle = "inset";
                                                    username_field.style.backgroundColor = "lightgreen";
                                                    password_field.style.borderColor = "green";
                                                    password_field.style.borderStyle = "inset";
                                                    password_field.style.backgroundColor = "lightgreen";
                                                    //Auto-fill, and auto-submit login form.
                                                    username_field.value = username;
                                                    password_field.value = password;
                                                    submit_field.click();

                                                }
                                                else
                                                    return; //If the web page does not have a password field, then just simply return, i.e. skip the rest of the code.
                                            }
                                        }
                                    }

                                    if ((username != "") && (password != ""))
                                        formFiller(username, password);


                                    return;
                                }
                                else //Activate HTTPS-based CPM
                                {

                                    //AES-encryption
                                    var keySizeInBits = 256;
                                    var blockSizeInBits = 128;

                                    var roundsArray = [, , , , [, , , , 10, , 12, , 14], ,
																		[, , , , 12, , 12, , 14], ,
																		[, , , , 14, , 14, , 14]];

                                    var shiftOffsets = [, , , , [, 1, 2, 3], , [, 1, 2, 3], , [, 1, 3, 4]];

                                    var Rcon = [
												0x01, 0x02, 0x04, 0x08, 0x10, 0x20,
												0x40, 0x80, 0x1b, 0x36, 0x6c, 0xd8,
												0xab, 0x4d, 0x9a, 0x2f, 0x5e, 0xbc,
												0x63, 0xc6, 0x97, 0x35, 0x6a, 0xd4,
												0xb3, 0x7d, 0xfa, 0xef, 0xc5, 0x91];

                                    var SBox = [
												 99, 124, 119, 123, 242, 107, 111, 197, 48, 1, 103, 43, 254, 215, 171,
												118, 202, 130, 201, 125, 250, 89, 71, 240, 173, 212, 162, 175, 156, 164,
												114, 192, 183, 253, 147, 38, 54, 63, 247, 204, 52, 165, 229, 241, 113,
												216, 49, 21, 4, 199, 35, 195, 24, 150, 5, 154, 7, 18, 128, 226,
												235, 39, 178, 117, 9, 131, 44, 26, 27, 110, 90, 160, 82, 59, 214,
												179, 41, 227, 47, 132, 83, 209, 0, 237, 32, 252, 177, 91, 106, 203,
												190, 57, 74, 76, 88, 207, 208, 239, 170, 251, 67, 77, 51, 133, 69,
												249, 2, 127, 80, 60, 159, 168, 81, 163, 64, 143, 146, 157, 56, 245,
												188, 182, 218, 33, 16, 255, 243, 210, 205, 12, 19, 236, 95, 151, 68,
												23, 196, 167, 126, 61, 100, 93, 25, 115, 96, 129, 79, 220, 34, 42,
												144, 136, 70, 238, 184, 20, 222, 94, 11, 219, 224, 50, 58, 10, 73,
												  6, 36, 92, 194, 211, 172, 98, 145, 149, 228, 121, 231, 200, 55, 109,
												141, 213, 78, 169, 108, 86, 244, 234, 101, 122, 174, 8, 186, 120, 37,
												 46, 28, 166, 180, 198, 232, 221, 116, 31, 75, 189, 139, 138, 112, 62,
												181, 102, 72, 3, 246, 14, 97, 53, 87, 185, 134, 193, 29, 158, 225,
												248, 152, 17, 105, 217, 142, 148, 155, 30, 135, 233, 206, 85, 40, 223,
												140, 161, 137, 13, 191, 230, 66, 104, 65, 153, 45, 15, 176, 84, 187,
												 22];

                                    var SBoxInverse = [
												 82, 9, 106, 213, 48, 54, 165, 56, 191, 64, 163, 158, 129, 243, 215,
												251, 124, 227, 57, 130, 155, 47, 255, 135, 52, 142, 67, 68, 196, 222,
												233, 203, 84, 123, 148, 50, 166, 194, 35, 61, 238, 76, 149, 11, 66,
												250, 195, 78, 8, 46, 161, 102, 40, 217, 36, 178, 118, 91, 162, 73,
												109, 139, 209, 37, 114, 248, 246, 100, 134, 104, 152, 22, 212, 164, 92,
												204, 93, 101, 182, 146, 108, 112, 72, 80, 253, 237, 185, 218, 94, 21,
												 70, 87, 167, 141, 157, 132, 144, 216, 171, 0, 140, 188, 211, 10, 247,
												228, 88, 5, 184, 179, 69, 6, 208, 44, 30, 143, 202, 63, 15, 2,
												193, 175, 189, 3, 1, 19, 138, 107, 58, 145, 17, 65, 79, 103, 220,
												234, 151, 242, 207, 206, 240, 180, 230, 115, 150, 172, 116, 34, 231, 173,
												 53, 133, 226, 249, 55, 232, 28, 117, 223, 110, 71, 241, 26, 113, 29,
												 41, 197, 137, 111, 183, 98, 14, 170, 24, 190, 27, 252, 86, 62, 75,
												198, 210, 121, 32, 154, 219, 192, 254, 120, 205, 90, 244, 31, 221, 168,
												 51, 136, 7, 199, 49, 177, 18, 16, 89, 39, 128, 236, 95, 96, 81,
												127, 169, 25, 181, 74, 13, 45, 229, 122, 159, 147, 201, 156, 239, 160,
												224, 59, 77, 174, 42, 245, 176, 200, 235, 187, 60, 131, 83, 153, 97,
												 23, 43, 4, 126, 186, 119, 214, 38, 225, 105, 20, 99, 85, 33, 12,
												125];



                                    function cyclicShiftLeft(theArray, positions) {
                                        var temp = theArray.slice(0, positions);
                                        theArray = theArray.slice(positions).concat(temp);
                                        return theArray;
                                    }

                                    var Nk = keySizeInBits / 32;
                                    var Nb = blockSizeInBits / 32;
                                    var Nr = roundsArray[Nk][Nb];


                                    function xtime(poly) {
                                        poly <<= 1;
                                        return ((poly & 0x100) ? (poly ^ 0x11B) : (poly));
                                    }


                                    function mult_GF256(x, y) {
                                        var bit, result = 0;

                                        for (bit = 1; bit < 256; bit *= 2, y = xtime(y)) {
                                            if (x & bit)
                                                result ^= y;
                                        }
                                        return result;
                                    }



                                    function byteSub(state, direction) {
                                        var S;
                                        if (direction == "encrypt")           // Point S to the SBox we're using
                                            S = SBox;
                                        else
                                            S = SBoxInverse;
                                        for (var i = 0; i < 4; i++)           // Substitute for every byte in state
                                            for (var j = 0; j < Nb; j++)
                                                state[i][j] = S[state[i][j]];
                                    }


                                    function shiftRow(state, direction) {
                                        for (var i = 1; i < 4; i++)               // Row 0 never shifts
                                            if (direction == "encrypt")
                                                state[i] = cyclicShiftLeft(state[i], shiftOffsets[Nb][i]);
                                            else
                                                state[i] = cyclicShiftLeft(state[i], Nb - shiftOffsets[Nb][i]);

                                    }


                                    function mixColumn(state, direction) {
                                        var b = [];                            // Result of matrix multiplications
                                        for (var j = 0; j < Nb; j++) {         // Go through each column...
                                            for (var i = 0; i < 4; i++) {        // and for each row in the column...
                                                if (direction == "encrypt")
                                                    b[i] = mult_GF256(state[i][j], 2) ^          // perform mixing
															   mult_GF256(state[(i + 1) % 4][j], 3) ^
															   state[(i + 2) % 4][j] ^
															   state[(i + 3) % 4][j];
                                                else
                                                    b[i] = mult_GF256(state[i][j], 0xE) ^
															   mult_GF256(state[(i + 1) % 4][j], 0xB) ^
															   mult_GF256(state[(i + 2) % 4][j], 0xD) ^
															   mult_GF256(state[(i + 3) % 4][j], 9);
                                            }
                                            for (var i = 0; i < 4; i++)          // Place result back into column
                                                state[i][j] = b[i];
                                        }
                                    }


                                    function addRoundKey(state, roundKey) {
                                        for (var j = 0; j < Nb; j++) {                 // Step through columns...
                                            state[0][j] ^= (roundKey[j] & 0xFF);         // and XOR
                                            state[1][j] ^= ((roundKey[j] >> 8) & 0xFF);
                                            state[2][j] ^= ((roundKey[j] >> 16) & 0xFF);
                                            state[3][j] ^= ((roundKey[j] >> 24) & 0xFF);
                                        }
                                    }


                                    function keyExpansion(key) {
                                        var expandedKey = new Array();
                                        var temp;

                                        Nk = keySizeInBits / 32;
                                        Nb = blockSizeInBits / 32;
                                        Nr = roundsArray[Nk][Nb];

                                        for (var j = 0; j < Nk; j++)     // Fill in input key first
                                            expandedKey[j] =
													  (key[4 * j]) | (key[4 * j + 1] << 8) | (key[4 * j + 2] << 16) | (key[4 * j + 3] << 24);

                                        for (j = Nk; j < Nb * (Nr + 1); j++) {    // For each word of expanded key
                                            temp = expandedKey[j - 1];
                                            if (j % Nk == 0)
                                                temp = ((SBox[(temp >> 8) & 0xFF]) |
															   (SBox[(temp >> 16) & 0xFF] << 8) |
															   (SBox[(temp >> 24) & 0xFF] << 16) |
															   (SBox[temp & 0xFF] << 24)) ^ Rcon[Math.floor(j / Nk) - 1];
                                            else if (Nk > 6 && j % Nk == 4)
                                                temp = (SBox[(temp >> 24) & 0xFF] << 24) |
															 (SBox[(temp >> 16) & 0xFF] << 16) |
															 (SBox[(temp >> 8) & 0xFF] << 8) |
															 (SBox[temp & 0xFF]);
                                            expandedKey[j] = expandedKey[j - Nk] ^ temp;
                                        }
                                        return expandedKey;
                                    }


                                    function Round(state, roundKey) {
                                        byteSub(state, "encrypt");
                                        shiftRow(state, "encrypt");
                                        mixColumn(state, "encrypt");
                                        addRoundKey(state, roundKey);
                                    }

                                    function InverseRound(state, roundKey) {
                                        addRoundKey(state, roundKey);
                                        mixColumn(state, "decrypt");
                                        shiftRow(state, "decrypt");
                                        byteSub(state, "decrypt");
                                    }

                                    function FinalRound(state, roundKey) {
                                        byteSub(state, "encrypt");
                                        shiftRow(state, "encrypt");
                                        addRoundKey(state, roundKey);
                                    }

                                    function InverseFinalRound(state, roundKey) {
                                        addRoundKey(state, roundKey);
                                        shiftRow(state, "decrypt");
                                        byteSub(state, "decrypt");
                                    }

                                    // encrypt is the basic encryption function. It takes parameters
                                    // block, an array of bytes representing a plaintext block, and expandedKey,
                                    // an array of words representing the expanded key previously returned by
                                    // keyExpansion(). The ciphertext block is returned as an array of bytes.

                                    function encrypt(block, expandedKey) {
                                        var i;
                                        if (!block || block.length * 8 != blockSizeInBits)
                                            return;
                                        if (!expandedKey)
                                            return;

                                        block = packBytes(block);
                                        addRoundKey(block, expandedKey);
                                        for (i = 1; i < Nr; i++)
                                            Round(block, expandedKey.slice(Nb * i, Nb * (i + 1)));
                                        FinalRound(block, expandedKey.slice(Nb * Nr));
                                        return unpackBytes(block);
                                    }
                                    function byteArrayToString(byteArray) {
                                        var result = "";
                                        for (var i = 0; i < byteArray.length; i++)
                                            if (byteArray[i] != 0)
                                                result += String.fromCharCode(byteArray[i]);
                                        return result;
                                    }
                                    function byteArrayToHex(byteArray) {
                                        var result = "";
                                        if (!byteArray)
                                            return;
                                        for (var i = 0; i < byteArray.length; i++)
                                            result += ((byteArray[i] < 16) ? "0" : "") + byteArray[i].toString(16);

                                        return result;
                                    }
                                    function hexToByteArray(hexString) {
                                        var byteArray = [];
                                        if (hexString.length % 2)             // must have even length
                                            return;
                                        if (hexString.indexOf("0x") == 0 || hexString.indexOf("0X") == 0)
                                            hexString = hexString.substring(2);
                                        for (var i = 0; i < hexString.length; i += 2)
                                            byteArray[Math.floor(i / 2)] = parseInt(hexString.slice(i, i + 2), 16);
                                        return byteArray;
                                    }
                                    function packBytes(octets) {
                                        var state = new Array();
                                        if (!octets || octets.length % 4)
                                            return;

                                        state[0] = new Array(); state[1] = new Array();
                                        state[2] = new Array(); state[3] = new Array();
                                        for (var j = 0; j < octets.length; j += 4) {
                                            state[0][j / 4] = octets[j];
                                            state[1][j / 4] = octets[j + 1];
                                            state[2][j / 4] = octets[j + 2];
                                            state[3][j / 4] = octets[j + 3];
                                        }
                                        return state;
                                    }
                                    function unpackBytes(packed) {
                                        var result = new Array();
                                        for (var j = 0; j < packed[0].length; j++) {
                                            result[result.length] = packed[0][j];
                                            result[result.length] = packed[1][j];
                                            result[result.length] = packed[2][j];
                                            result[result.length] = packed[3][j];
                                        }
                                        return result;
                                    }
                                    function formatPlaintext(plaintext) {
                                        var bpb = blockSizeInBits / 8;               // bytes per block
                                        var i;

                                        // if primitive string or String instance
                                        if (typeof plaintext == "string" || plaintext.indexOf) {
                                            plaintext = plaintext.split("");
                                            // Unicode issues here (ignoring high byte)
                                            for (i = 0; i < plaintext.length; i++)
                                                plaintext[i] = plaintext[i].charCodeAt(0) & 0xFF;
                                        }

                                        for (i = bpb - (plaintext.length % bpb); i > 0 && i < bpb; i--)
                                            plaintext[plaintext.length] = 0;

                                        return plaintext;
                                    }
                                    function getRandomBytes(howMany) {
                                        var i;
                                        var bytes = new Array();
                                        for (i = 0; i < howMany; i++)
                                            bytes[i] = Math.round(Math.random() * 255);
                                        return bytes;
                                    }

                                    // rijndaelEncrypt(plaintext, key, mode)
                                    // Encrypts the plaintext using the given key and in the given mode. 
                                    // The parameter "plaintext" can either be a string or an array of bytes. 
                                    // The parameter "key" must be an array of key bytes. If you have a hex 
                                    // string representing the key, invoke hexToByteArray() on it to convert it 
                                    // to an array of bytes. The third parameter "mode" is a string indicating
                                    // the encryption mode to use, either "ECB" or "CBC". If the parameter is
                                    // omitted, ECB is assumed.
                                    // 
                                    // An array of bytes representing the cihpertext is returned. To convert 
                                    // this array to hex, invoke byteArrayToHex() on it. If you are using this 
                                    // "for real" it is a good idea to change the function getRandomBytes() to 
                                    // something that returns truly random bits.

                                    function rijndaelEncrypt(plaintext, key, mode) {
                                        var expandedKey, i, aBlock;
                                        var bpb = blockSizeInBits / 8;          // bytes per block
                                        var ct;                                 // ciphertext

                                        if (!plaintext || !key)
                                            return;
                                        if (key.length * 8 != keySizeInBits)
                                            return;
                                        if (mode == "CBC")
                                            ct = getRandomBytes(bpb);             // get IV
                                        else {
                                            mode = "ECB";
                                            ct = new Array();
                                        }

                                        // convert plaintext to byte array and pad with zeros if necessary. 
                                        plaintext = formatPlaintext(plaintext);

                                        expandedKey = keyExpansion(key);

                                        for (var block = 0; block < plaintext.length / bpb; block++) {
                                            aBlock = plaintext.slice(block * bpb, (block + 1) * bpb);
                                            if (mode == "CBC")
                                                for (var i = 0; i < bpb; i++)
                                                    aBlock[i] ^= ct[block * bpb + i];

                                            ct = ct.concat(encrypt(aBlock, expandedKey));
                                        }

                                        return ct;
                                    }

                                    key = "cba2b884949044bb34a461940a1644b4acd3bc0c4028d06d8b3c58b4105907a8";
                                    PassCard_ns = "http://www.oman4ever.org/PassCard"
                                    var username_encrypted = escape(byteArrayToHex(rijndaelEncrypt(username, hexToByteArray(key), "CBC")));
                                    //alert(username_encrypted.length + " "+ username_encrypted);
                                    var password_encrypted = escape(byteArrayToHex(rijndaelEncrypt(password, hexToByteArray(key), "CBC")));
                                    //alert(password_encrypted.length +"	"+password_encrypted);

                                    cookieName = location.hostname;
                                    target_HTTPS_Site = getCookie(cookieName);

                                    deleteCookie(cookieName);
                                    deleteCookie('PassCard.HTTPS'); // This is Very Important


                                    if ((target_HTTPS_Site != "") && (target_HTTPS_Site != null) && (username_encrypted != "") && (username_encrypted != null) && (password_encrypted != "") && (password_encrypted != null) && (PassCard_ns == "http://www.oman4ever.org/PassCard"))
                                        target_HTTPS_Site = target_HTTPS_Site + "?PassCard.identifier=" + username_encrypted + "&PassCard.verifier=" + password_encrypted + "&PassCard.ns=" + PassCard_ns;
                                    else {
                                        alert("Unable to construct the target HTTPS URL, contact the PassCard developer: Haitham Al-Sinani (oman4ever.org). The plug-in will terminate now ...");
                                        return;
                                    }
                                    //alert(target_HTTPS_Site);
                                    //alert(target_HTTPS_Site.length);
                                    //return;
                                    if ((target_HTTPS_Site != "") && (target_HTTPS_Site != null))
                                        window.location = target_HTTPS_Site;
                                    return;

                                }
                            }
                        }
                    }
                }

            } ];

            //Add PassCard logo to enable the user to invoke CardSpace
            //alert("Adding the CardSpace logo now ..."+submit_field);
            //if(submit_field)
            if (submitField_found) {
                //if(document.location.hostname == "mc.manuscriptcentral.com")
                //{
                if (getCookie("PassCard.checkLogo") != null && getCookie("PassCard.checkLogo") == "PassCard.LogoAdded" && getCookie("PassCard.checkLogo") != "" && getCookie("PassCard.checkLogo") != "undefined")
                    return;
                if (document.location.hostname == "mc.manuscriptcentral.com" || document.location.hostname == "aljazeera.net") {
                    //if (document.location.hostname == "mc.manuscriptcentral.com") {
                    var elm_parentt = password_field.parentNode;
                    var divv = document.createElement("div");
                    divv.innerHTML = '<img id="CardSpace_Logo_2010" alt="Click me to use  PassCard" title="Click me to use a PassCard" width="140" height="70" onclick="javascript:Interecept_Token();" src="' + PassCardLogo_HTTP + '"/><input type="hidden" id="xmltoken"/>'; //The fact that we are fetching the CardSpace logo form a non-SSL (non-https) websites might cause us problems with ssl/https websites										
                    elm_parentt.insertBefore(divv, password_field.nextSibling);
                    set_Shortlived_Cookie("PassCard.checkLogo", "PassCard.LogoAdded", 5);
                    break Forms_Loop;
                }
                else {
                    var elm_parentt = submit_field.parentNode;
                    var divv = document.createElement("div");
                    divv.innerHTML = '<img id="CardSpace_Logo_2010" alt="Click me to use  PassCard" title="Click me to use a PassCard" width="140" height="70" onclick="javascript:Interecept_Token();" src="' + PassCardLogo_HTTP + '"/><input type="hidden" id="xmltoken"/>'; //The fact that we are fetching the CardSpace logo form a non-SSL (non-https) websites might cause us problems with ssl/https websites										
                    elm_parentt.insertBefore(divv, submit_field);
                    set_Shortlived_Cookie("PassCard.checkLogo", "PassCard.LogoAdded", 5);
                    //alert("PassCard logo added!");
                    break Forms_Loop;
                }
            }

        } //end of the ousider/first for loop: 	"for(var x=0; x < document.forms.length; x++)"

        if ((document.location.host == 'www.oman4ever.org') || (document.location.host == "localhost:8080") || (document.location.host == "localhost") || (Login_Page == MyWebPage)) {
            var CurrentURL = window.location.href;
            var Queryparams = "";
            Queryparams = location.search;
            var cookieName = location.hostname;
            //alert(Queryparams + "	" + cookieName);
            if ((Queryparams != null) && (Queryparams != "")) {
                //alert(document.referrer); doesn't work
                //return;
                var queryParam = Queryparams.substring(1);
                var qs2 = new Querystring(queryParam);
                var Desired_HTTPS_based_website = qs2.get("PassCard.targetURL");
                var PassCardUniqueURL_Received = qs2.get("PassCard.ns");
                if ((Desired_HTTPS_based_website != null) && (Desired_HTTPS_based_website != "") && (PassCardUniqueURL_Received == PassCard_ns)) {

                    var CardSpace_Logo_2010 = document.getElementById("CardSpace_Logo_2010");
                    var HTTPS_CPM = getCookie('PassCard.HTTPS');
                    //alert("HTTPS_CPM:	"+HTTPS_CPM)
                    if (HTTPS_CPM == "")
                        setCookie('PassCard.HTTPS', 'Activated', 1)

                    setCookie(cookieName, Desired_HTTPS_based_website, 1)
                    CardSpace_Logo_2010.click();
                }
            }
        }

    } //end of the very first if statement: "if(document.forms.length >= 0)" Everything is enclosed within this if statement 

})();
Comment of PassCard
	[2010-07-16 10:00:51]Jason404 says:
	Isn't this what PassCard is intended for anyway? The only place I ever use it is for logging into my OpenID at www.myopenid.com.
	[2010-07-21 18:22:14]PassCard says:
	@Jason404 Instead of passwords, <href src="http://msdn.microsoft.com/en-us/library/aa480189.aspx">CardSpace</href> submits digital cards (InfoCards) to websites.
	[2010-07-21 18:27:00]PassCard says:
	@Jason404 Instead of passwords, <a src="http://msdn.microsoft.com/en-us/library/aa480189.aspx">CardSpace</a> submits digital cards (InfoCards) to websites.
Join Iescripts for a free account, or Login if you are already a member.
Username: Password:
Install Script
Download Script
Add To favorite

Written by


Name:	PassCard
Scripts:	1
Styles:	0
Plugins:	0
Tags
About IE7Pro
IE7Pro is a plugin for the Internet Explorer web browser. It allows you to change how your favorite pages behave and look. There are many scripts that have already been written, and if you know javascript you can easily create your own! This site is a repository to download and install IE user scripts.
How to install user script
1 . First you should have install IE7Pro 0.9.12 and above which support IE user scripts. 2. Check if IE7Pro "Preference" - "User Scripts" - "EnabLe User Script" is enabled. 3. Find your favorite scripts on iescripts.org and click "Install This Script" .
iescripts.org