[JavaScript] HTTP Header Spoof

[Laurent Muchacho]

Hi Flavio,

You might be able to hack the xmlhttp but your problem is not related to the
xmlhttp your free server will probably have a set up to avoid your content
be loaded from an other server or it's the server where you pay who doesn't
allow loading img or external data from other source this is common use on
hosting server company. It is the way for them to make sure you will pay.

One thing in ASP if you want to load an external xmlfeed from your site you
have to set it in the code like so 
"""""""""""""
set xml = Server.CreateObject("Microsoft.XMLDOM")
xml.async = false
xml.SetProperty "ServerHTTPRequest", true
xml.load(xmlFeed)
"""""""""""
I'm really novice with PHP and can't give you the exact syntax but I'm
pretty sure there is one.

Laurent 

-----Original Message-----
From: Flavio Gomes [mailto:flavio at economisa.com.br]
Sent: 29 June 2004 15:17
To: [JavaScript List]
Subject: [Javascript] HTTP Header Spoof



 Hello Everyone,

 I'm having a little problem here,

   I got a server with PHP enabled that I pay for stream and disk space, 
and another freeserver that hosts my big images and files.

But when I do something like
 <img src="http://freeserver/myimage.jpg">
from PHP server, I got a forbidden message, because it doesnt let me use 
their band...

  Well, using PHP I could manage to bring the files through header 
spoofing and setting the "Referer" to a "http://freeserver" page, but 
still I use my PHP paid stream to download the files, because the URL'll 
seems like:
  <img src="http://phpserver/download.php?file=http|freeserver/myimage.jpg">

 And *here* is where /Jscript/ gets in:
  In order to save the stream use, I tought that something like XMLhttp 
object would help me... so the user would download directly from 
"http://freeserver"
     But, XMLhttp doesnt let me access another host u.u ("You cannot 
open a connection to a different host" => 
http://www.mozilla.org/xmlextras/ )

Aaaaand here comes the question:

  I'd like to know if anybody knows a way to /hack/  XMLhttp to allow 
access to diferent hosts or any other idea so I'd be able to use my nice 
freeserver images on my phpserver? ^^


Thanks in advance,

---
Flavio Gomes
flavio at economisa.com.br

_______________________________________________
Javascript mailing list
Javascript at LaTech.edu
https://lists.LaTech.edu/mailman/listinfo/javascript


This E-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.  If you have received this E-mail in error please notify the system manager.  This message contains confidential information and is intended only for the individual named.  If you are not the named addressee you should not disseminate, distribute or copy this E-mail.