[JavaScript] HTTP Header Spoof
Laurent Muchacho
LaurentM at london.virgin.net
Tue Jun 29 09:51:17 CDT 2004
Hi Flavio,
You might be able to hack the xmlhttp but your problem is not related to the
xmlhttp your free server will probably have a set up to avoid your content
be loaded from an other server or it's the server where you pay who doesn't
allow loading img or external data from other source this is common use on
hosting server company. It is the way for them to make sure you will pay.
One thing in ASP if you want to load an external xmlfeed from your site you
have to set it in the code like so
"""""""""""""
set xml = Server.CreateObject("Microsoft.XMLDOM")
xml.async = false
xml.SetProperty "ServerHTTPRequest", true
xml.load(xmlFeed)
"""""""""""
I'm really novice with PHP and can't give you the exact syntax but I'm
pretty sure there is one.
Laurent
-----Original Message-----
From: Flavio Gomes [mailto:flavio at economisa.com.br]
Sent: 29 June 2004 15:17
To: [JavaScript List]
Subject: [Javascript] HTTP Header Spoof
Hello Everyone,
I'm having a little problem here,
I got a server with PHP enabled that I pay for stream and disk space,
and another freeserver that hosts my big images and files.
But when I do something like
<img src="http://freeserver/myimage.jpg">
from PHP server, I got a forbidden message, because it doesnt let me use
their band...
Well, using PHP I could manage to bring the files through header
spoofing and setting the "Referer" to a "http://freeserver" page, but
still I use my PHP paid stream to download the files, because the URL'll
seems like:
<img src="http://phpserver/download.php?file=http|freeserver/myimage.jpg">
And *here* is where /Jscript/ gets in:
In order to save the stream use, I tought that something like XMLhttp
object would help me... so the user would download directly from
"http://freeserver"
But, XMLhttp doesnt let me access another host u.u ("You cannot
open a connection to a different host" =>
http://www.mozilla.org/xmlextras/ )
Aaaaand here comes the question:
I'd like to know if anybody knows a way to /hack/ XMLhttp to allow
access to diferent hosts or any other idea so I'd be able to use my nice
freeserver images on my phpserver? ^^
Thanks in advance,
---
Flavio Gomes
flavio at economisa.com.br
_______________________________________________
Javascript mailing list
Javascript at LaTech.edu
https://lists.LaTech.edu/mailman/listinfo/javascript
This E-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this E-mail in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this E-mail.
More information about the Javascript
mailing list