115530 - Cannot login to UnitedTrust's Online Banking Service

Status: VERIFIED WORKSFORME

(Tech Evangelism Graveyard :: English US, defect)

Description

[Craig Busse]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.6) Gecko/20011120
BuildID:    2001112009

This is a possible "Evangelism" bug, but I am not expert enuf
to know for sure.

In Netscape 4.7 clicking on login at the cited URL takes me to a proper login
page. With Moz 0.9.6 I see an error page.


Reproducible: Always
Steps to Reproduce:
1.go to http://www.unitedtrust.com/bankmain.asp
2.click on "Submit" button. (yes, nothing is entered yet to submit,
  but those are the instructions for proceeding).
3.

Actual Results:  

Your interactive session cannot be continued.
Possible Causes

    * Your browser may not be fully compatible with web forms.
    * You have attempted to continue your session from a different IP address.
    * Your ID tag is invalid.

Resolution

    * Restart this application from the beginning.



Expected Results:  Login page with input boxes for userid and password.
The new URL for this logon page is:

https://www.united-national.com/scripts/cgiclnt.exe/CORE-Main%20Web/ND000_

This same URL displays the error message when accessed with Mozilla.


note: United Trust was previously United National.

Comment 1

[gavin long]

[all my testing on win98SE, 2001121003]

The URL given in the URL field above gives the following message :

"We understand that the security of your personal information is important to
you. That's why our online banking system requires the use of browsers with
128-bit encryption. If you are not using at least netscape 4.0 or Microsoft
explorer 4.0, you may update your browser by selecting one of the buttons below."

Ick.  Anyhow, proceeding onward, when I hit the submit button, nothing much
happens.  The throbber doesn't visibly throb, but the progress indicator
advances very rapidly to 100%, then finishes.

The second URL mentioned
(https://www.united-national.com/scripts/cgiclnt.exe/CORE-Main%20Web/ND000_)
is actually the target for the form POST.

If I follow the above steps in IE5.5, this is the URL shown in the nav bar when
the login page appears.  Cut-and-pasting this into Moz gives the above error. 
Surprise!  Since there's no HTTP POST data, the server side processing barfs.

So, what's moz doing when I press submit?

The <form> in question LOOKS ok, though the submit tag is inside an <a href...>
</a> pair, with an invalid href, like this:

<form method="POST"
action="https://www.united-national.com/scripts/cgiclnt.exe/CORE-Main%20Web/ND000_">

<input type=hidden name="EWF_SYS_0" value="61118042-ff0a-11d0-98df-006097b70359">
<input type=hidden name="EWF_FORM_NAME" value="aBegin">

[waffle, waffle, page content]

<input type=hidden name="BANK ID" value="EDIFY">
<input type=hidden name="PRODUCT NAME" value="EBS">
<input type=hidden name="LANGUAGE ID" value="">

<a href="http://">
<input type=submit name="EWF_BUTTON_Submit" value="Submit">
</a>

[blah blah blah]

</form>

If I save the page, remove the <a></a> tag, then reload the page in Moz and hit
submit, then I get the login page, without a hitch.  Hrm.

[also, the <form> is deeply nested within tables in the page structure, but the
</form> is right before the </body>, but I don't think that's the problem]

So, I think that the <a href="http://"> ... </a> is breaking the form submission.

Confirming, since there is _a_ problem here.  I'll punt it over to HTML Form
Controls first, though this could well be Form Submission or Tech Evangelism.

Comment 2

[rods (gone)]

sounds like form submission

Comment 3

[Boris Zbarsky [:bzbarsky]]

what does javascript:alert(document.forms.length) show on this site in 0.9.6 and 
0.9.7?

Comment 4

[Alexandru Savulov]

setting milestone

Comment 5

[Boris Zbarsky [:bzbarsky]]

Attachment: Minimal testcase

Comment 6

[Boris Zbarsky [:bzbarsky]]

resetting milestone, over to event handling.  This is not a form submission bug;
the submit button never gets the event.

Comment 7

[Judson Valeski]

-> evangelism

Comment 8

[Judson Valeski]

-> evang

Comment 9

[Judson Valeski]

oy, sorry for the spam.

Comment 10

[Judson Valeski]

my current win2k build allows me to get to the login page. closing as works for
me, please reopen if appropriate. the reduced test case appears valid, please
file a new bug on that issue.

Comment 11

[gavin long]

Yes, the HTML of the form has changed compared to what I saw in December.  Looks
like they fixed the site. 

However, as mentioned above, Boris's reduced testcase still has problems.

Comment 12

[gavin long]

New bug 127903 filed with Boris's testcase.

Verifying this bug as fixed (i.e. the original site no longer has a problem on
0.9.8 or 2002022603)

Comment 13

[Nick Bebout]

Moving to new component