[thelist] ...try again

James O'Donnell jimmyropes at gmail.com
Sun Aug 23 11:48:35 CDT 2009


" The code works great as long as I'm calling a script on my domain, but
fails
when I try to call the script from one of our other domains."

That is by design.  Cross site scripting is a serious problem.



-----Original Message-----
From: thelist-bounces at lists.evolt.org
[mailto:thelist-bounces at lists.evolt.org] On Behalf Of John Corry
Sent: Sunday, 23 August, 2009 12:17
To: thelist at lists.evolt.org
Subject: Re: [thelist] ...try again

That didn't work.
I saw material online that suggested that calling URLs from other domains
with XMLHttpRequest() is allowed as of FF 3...but that doesn't seem to be
the case.

The code works great as long as I'm calling a script on my domain, but fails
when I try to call the script from one of our other domains.

So now I'm shifting gears into looking for a cURL alternative.

John

On Sat, Aug 22, 2009 at 10:58 PM, Anthony Baratta
<anthony at baratta.com>wrote:

> John Corry wrote:
> >       http_request.open('POST', url , true);
>
> Quick and dirty check. Change the above to:
>
>        http_request.open('POST', url , false);
>
>
> This way the browser waits for the return code instead of sending and
> not waiting.
>
>
>
> --
> Anthony Baratta
>
> "There are only two kinds of people that understand Marines: the Marines
> and the enemy. Everyone else has a secondhand opinion." -- Gen. William
> Thornson, US Army
>
> --
>
> * * Please support the community that supports you.  * *
> http://evolt.org/help_support_evolt/
>
> For unsubscribe and other options, including the Tip Harvester
> and archives of thelist go to: http://lists.evolt.org
> Workers of the Web, evolt !
>



-- 
John Corry
PHP developer - 3by400, Inc
http://www.3by400.com
-- 

* * Please support the community that supports you.  * *
http://evolt.org/help_support_evolt/

For unsubscribe and other options, including the Tip Harvester 
and archives of thelist go to: http://lists.evolt.org 
Workers of the Web, evolt ! 

No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 8.5.392 / Virus Database: 270.13.63/2316 - Release Date: 08/23/09
06:18:00




More information about the thelist mailing list