A jQuery UIplugin
that captures or draws a signature.
It requires the jQuery UI widget and mouse modules and needs the
excanvas.js add-in for older IE versions.
The current version is 1.2.1 and is available
under the MIT licence.
For more detail see the documentation reference page.
Or see a minimal page that you could
use as a basis for your own investigations.
The inurl: operator tells Google to restrict search results to pages where the specified text appears itself. It does not search the page content, only the web address.
Her next step was physical. The municipal archives lived in a converted textile warehouse near the river; the room with the old index cards still smelled like dust and adhesive. She arrived before opening and watched the city wake. The guard—a woman named Hazz, who had a habit of humming sea shanties as she swept—let her in with a nod. In the basement, under a score of steel shelves, Mora found box 14. inurl view index shtml 14 updated
In the deep folds of Google’s search index, buried beneath cat videos and shopping links, lie strings of text that function like skeleton keys. One such key is inurl:"view/index.shtml" "14 updated" . To the untrained eye, it looks like a fragment of a corrupted file path. To a system administrator or a penetration tester, it’s a distress flare—or an invitation. The inurl: operator tells Google to restrict search
Security professionals use these dorks to identify and report unsecured devices to their owners. However, viewing private feeds without consent is a significant privacy violation and often illegal. How to Secure Your Devices The municipal archives lived in a converted textile
For the ethical hacker, it is a magnifying glass to examine the digital shadows. For the system administrator, it is a red alert to check their own server configurations. By understanding what this dork targets – the intersection of Server Side Includes and timestamps – you can both find hidden intelligence and secure your own web properties from inadvertent exposure.
Options
Customise the signature functionality through additional settings.
Using metadata for configuration may require adding the jquery.metadata.js plugin to your page.
Events
You can be notified when the signature has changed via the change setting.
And you can erase the signature with the clear command and
test for any content via the isEmpty command.
Extract the signature as a JSON value, and later re-draw it from that value.
Alternately you can generate the signature as SVG, or as a data URL in PNG or JPEG format.
The inurl: operator tells Google to restrict search results to pages where the specified text appears itself. It does not search the page content, only the web address.
Her next step was physical. The municipal archives lived in a converted textile warehouse near the river; the room with the old index cards still smelled like dust and adhesive. She arrived before opening and watched the city wake. The guard—a woman named Hazz, who had a habit of humming sea shanties as she swept—let her in with a nod. In the basement, under a score of steel shelves, Mora found box 14.
In the deep folds of Google’s search index, buried beneath cat videos and shopping links, lie strings of text that function like skeleton keys. One such key is inurl:"view/index.shtml" "14 updated" . To the untrained eye, it looks like a fragment of a corrupted file path. To a system administrator or a penetration tester, it’s a distress flare—or an invitation.
Security professionals use these dorks to identify and report unsecured devices to their owners. However, viewing private feeds without consent is a significant privacy violation and often illegal. How to Secure Your Devices
For the ethical hacker, it is a magnifying glass to examine the digital shadows. For the system administrator, it is a red alert to check their own server configurations. By understanding what this dork targets – the intersection of Server Side Includes and timestamps – you can both find hidden intelligence and secure your own web properties from inadvertent exposure.
C# Rendering
You can render an image from the signature JSON text on the server.
The following shows how to do this in .NET 4.5 C#, thanks to Daniel Knight.
You would call this code as follows
and it returns a base64 encoded byte array as a string:
GetBase64Png(jsonEncoding, width, height);
using System;
using System.Collections.Generic;
using System.Web.Script.Serialization;
using System.Drawing;
using System.Drawing.Imaging;
using System.IO;
using System.Web.Http;
public class GraphicsController : ApiController
{
[HttpGet]
[ActionName("GetBase64Png")]
public string GetBase64Png([FromUri] string linesGraphicJSON, [FromUri] int width, [FromUri] int height)
{
return Draw2DLineGraphic(new JavaScriptSerializer().Deserialize<Signature>(linesGraphicJSON), width, height);
}
private string Draw2DLineGraphic(I2DLineGraphic lineGraphic, int width, int height)
{
//The png's bytes
byte[] png = null;
//Create the Bitmap set Width and height
using (Bitmap b = new Bitmap(width, height))
{
using (Graphics g = Graphics.FromImage(b))
{
//Make sure the image is drawn Smoothly (this makes the pen lines look smoother)
g.SmoothingMode = System.Drawing.Drawing2D.SmoothingMode.AntiAlias;
//Set the background to white
g.Clear(Color.White);
//Create a pen to draw the signature with
Pen pen = new Pen(Color.Black, 2);
//Smooth out the pen, making it rounded
pen.DashCap = System.Drawing.Drawing2D.DashCap.Round;
//Last point a line finished at
Point LastPoint = new Point();
bool hasLastPoint = false;
//Draw the signature on the bitmap
foreach (List<List<double>> line in lineGraphic.lines)
{
foreach (List<double> point in line)
{
var x = (int)Math.Round(point[0]);
var y = (int)Math.Round(point[1]);
if (hasLastPoint)
{
g.DrawLine(pen, LastPoint, new Point(x, y));
}
LastPoint.X = x;
LastPoint.Y = y;
hasLastPoint = true;
}
hasLastPoint = false;
}
}
//Convert the image to a png in memory
using (MemoryStream stream = new MemoryStream())
{
b.Save(stream, ImageFormat.Png);
png = stream.ToArray();
}
}
return Convert.ToBase64String(png);
}
public class Signature : I2DLineGraphic
{
public List<List<List<double>>> lines { get; set; }
}
interface I2DLineGraphic
{
List<List<List<double>>> lines { get; set; }
}
}
In the Wild
This tab highlights examples of this plugin in use "in the wild".
None as yet.
To add another example, please contact me (kbwood.au{at}gmail.com)
and provide the plugin name, the URL of your site, its title,
and a short description of its purpose and where/how the plugin is used.
Quick Reference
A full list of all possible settings is shown below.
Note that not all would apply in all cases. For more detail see the
documentation reference page.
$(selector).signature({
background: '#ffffff', // Colour of the background
color: '#000000', // Colour of the signature
thickness: 2, // Thickness of the lines
guideline: false, // Add a guide line or not?
guidelineColor: '#a0a0a0', // Guide line colour
guidelineOffset: 25, // Guide line offset from the bottom
guidelineIndent: 10, // Guide line indent from the edges
// Error message when no canvas
notAvailable: 'Your browser doesn\'t support signing',
scale: 1, // A scaling factor for rendering the signature (only applies to redraws).
syncField: null, // Selector for synchronised text field
syncFormat: 'JSON', // The output respresentation: 'JSON' (default), 'SVG', 'PNG', 'JPEG'
svgStyles: false, // True to use style attribute in SVG
change: null // Callback when signature changed
});
$.kbw.signature.options // Access settings for all instances
$(selector).signature('option', settings) // Change the instance settings
$(selector).signature('option', name, value) // Change an instance setting
$(selector).signature('option') // Retrieve the instance settings
$(selector).signature('option', name) // Retrieve an instance setting
$(selector).signature('enable') // Enable the signature functionality
$(selector).signature('disable') // Disable the signature functionality
$(selector).signature('destroy') // Remove the signature functionality
$(selector).signature('clear') // Erase any signature
$(selector).signature('isEmpty') // Determine if there is no signature
$(selector).signature('toDataURL') // Convert the signature to an image in a data: URL
$(selector).signature('toJSON') // Convert the signature to JSON
$(selector).signature('toSVG') // Convert the signature to SVG
$(selector).signature('draw', sig) // Re-draw the signature from JSON, SVG, or a data: URL
Usage
Include the jQuery and jQuery UI libraries and CSS in the head section of your page.