I wish to make an AJAX call to a script on a different domain - realise this is a security problem, but is this at all possible?
My client is embedding html web pages into his ebay listings, and he wants to centrally update the product information. Maybe there is a different / better way to go about this?
How know that for ajax call to different domain applies the same domain policy, but is there anyway to get around this using the cluetip plugin?
View 3 Replies View RelatedTo make cross domain calls when json is required (JSONP) is easy
Code:
$.ajax({
url:"testserver.php",
dataType: 'JSONP',
success:function(json){
[Code]....
I see the XML comming in as a string argument of 'myCallback', but ist never called. Also 'success' is never called!
I am recentlyexperiencinga problem with .ajax calling cross domain asp.net webservice. It started working fine, until the data returned from server is becoming too big and suddenly the ajax call caused errors, if i reduce the data length then the error went away. After doing some debug, i have identified the problem being the callback was inserted into the returned data.
[Code]...
Is it possible to use $.ajax to call an external web service directly, or do I need to write a dot net server-side wrapper to consume the web service, then call the wrapper from jQuery ?
I have attempted a direct call as shown below, which works fine in IE but generates an error in Firefox, which I presume relates to the cross-domain scripting issue.
$.ajaxSetup({ cache: false });
I'm doing a JSONP query of a Wordpress database. Example call:[URL].. This code returns the expected data when executed on my local server. It also returns the expected data when I upload it to one of my remote servers. But it fails when run from the root of the domain it's calling, [URL]... no data is returned. (Behavior is the same for latest versions of Firefox, Safari, Chrome.)
I think there's something really simple going wrong here but don't know what it is. The only clue I have is provided by Firefox: When run successfully, all of the GET's appear in the JS subpanel of NET. The failed calls, launched from the domain containing the database, are listed in the XHR subpanel with a status of "301 Moved Permanently".
I trying to make a call to an external domain using $.ajax() and it WORKS, the server receives the call, but the response in firebug errors out in jquery.js line 7760. I've been beating my head at this all day and don't feel like I've made it much further.
I suspect it has something to do with the dataType or type of the request. But I've tried all kinds of things from POST to GET to JSONP in the type. For dataType, I've also tried "html", "text", "xml", "json", and even some combos of "text html" but no success.
[Code]...
All I'm doing righthere is calling a Perl script on an intranet server and using the xml results to popluate a <select> element. This works on my machine but a co-worker is getting a "Permission Denied" error when this function is executing onReady
function
populateGroups(){
var p = 1;
var groupNames = new
Array();
$.ajax({
type:"GET", .....
I had him run a tracert to that server and we all connected through the same network devices... And this works on a couple of other co-worker's computers. He also does have access to that server so that he can type in the url and get the xml results...
I couldn't do a xmlhttp.open("GET" [url] true)
The problem was something along the lines of the script not being allowed to call a page from another domain or something..
i need to post data from a form to a page on another domain, without leaving the current page.I am using ASP as a server language.
View 9 Replies View RelatedI want to call a script from one domain in another domain. How can I *guarantee* that the page calling the script is from my domain and not some hacker/malicious user?The context is that I'm writing my own commenting system, like disqus or intensedebate. They use javascript to imbed your comments (stored on their site) in your site.
Here's how intensedebate's "generic" approach works: You imbed this code into your page:
Code:
<script>
var idcomments_acct = 'YOUR ACCOUNT ID';
var idcomments_post_id;
[code].....
The problem is that anyone has access to your accound ID by just looking at the HTML source, so anyone can bomb your account...
I'm writing a web page, which should interact with pages on another server using an iFrame. I want to use a form on the parent page to post to the URL on the iFrame and capture the response, without reloading the parent page.
Here are the details:I have a FORM on the parent JSP page, with some session data in hidden fields. The point to note is that the whole session data is on the client side, in encrypted form. This data should be posted to the server for each request, synchronous or asynchronous.Now, I need to call an application on a server on a different domain. For this purpose, I am using an iFrame. The session data in the parent page should also be passed to the application in the iFrame.
I have a little issue with the use of jQuery and a call with the method Ajax. The problem appears with IE7 when I call just after the page was loaded. If I wait 2/3secondes, I don't have this beautiful message :
[Code]...
I'm fairly new to javascript and JQuery so please bear with me. I've written a simple app using JQuery whose purpose is to select the fastest mirror site. To this end I use several $.ajax calls - one to each mirror site -and I don't do anything with the data I get from these, I only use the order in which they respond to sort the sites from fastest to slowest. I'd share the code, but really the only thing it does is call the $.ajax function and append a line in a table using the success: callback. This works perfectly fine for most browsers, except IE which throws the 'access is denied' error. I know about cross domain restrictions and understand the reasoning behind - my plan was to put my script in the 'trusted' zone and enable the required options to bypass the problem as this will be used in a controlled environment, but no matter what I try my code won't run in IE. Some of my mirror sites are indeed in a different domain. What I have trouble understanding is why all other browsers (FF, Chrome etc), with their default configuration, allow my code to run flawlessly? If the reasoning behind IE blocking this is correct, then why do others allow it?
Also obviously for my purpose using a server-side proxy makes no sense as I want to test the sites from the client side, not from the server. I've also read about other work arounds such as JSONP but unfortunately the sites that I'm testing cannot support this. But once again, what I'm really wondering about is why my code works flawlessly in other browsers..
I'm using .ajax for my async requests. When I use a file nameds as "ajax.php" all works fine. But when I use a full domain like [url] I doesn't get a answer. In Firebug I only get the [url]
The Answer body is also empty. What is wrong in my code?
My Code:
I'm writing this post as there are alot of questions about Cross Domain AJAX request so i'm going to give an overview of the different ways and the best practices Ok so there are 2 systems for this the key difference is how much control you have.
If you control the Requested site you can use Javascript Safe calling to that server, this is all done via a few Headers so to do this all you have to do is send some headers from the page your requesting.
The first is tell the browser that the site the AJAX call is coming from is allowed this is done with
"Access-Control-Allow-Origin: " Now this can be set to a wild card and allow all sites to access the page
"Access-Control-Allow-Origin: *"
Or you can say only a set server can
"Access-Control-Allow-Origin: mydomain.com"
This header allows GET requests but what if you need to post data to the site well you need to tell the browser that POST data is allowed to be sent Access-Control-Allow-Headers: GET,POST
Now we run into the problem that sending post data the browser will send the header Content-Type but your server has not told the browser its allowed to send that header so Access-Control-Allow-Methods: Content-Type Will allow the header to be sent if you wish to send any other custom headers you have to make your server tell the browser its allowed to send them this is done by adding them as a comma delimited list via the "Access-Control-Allow-Headers" header
Now if you dont have control well then your back to using a script that is local to the AJAX script then sending the data via cURL or another connection method to the remote server
[Code]...
Is there a way of using the Ajax httpRequest cross domain?
View 6 Replies View RelatedThe general framework is a simple user login function. The user name is selected and a password entered as usual. The function grabs the element values and passes them to a php page that queries the database. An AJAX call returns the password to the function and then I want the innerHTML to be a choice of two web pages, depending on success or failure of validation. There are existing AJAX functions available on the internet but they are overly complicated for what I think should be a simple, quick to load function.
Where I am stuck is that the standard procedure to make an AJAX call is the browser window event. How do you make the call from within the function? I have tried creating two new variables, "success" and "again" to replace xmlhttp, but still stumble on the event to assign a value. I left the blank password protection (if statement) with that variable to demonstrate what I mean.
I've put in my code below, which is in development and successfully alters the innerHTML text depending on user input but I can't figure out how to insert the relevant php page. I have '// out' the testing bits, but left them for info. (I have tried full 'scripting' as the innerHTML, but it's messy.)
I want to POST data to my personal website[code]...
If i run the code from my localhost it doesn't return anything
I know cross domain Ajax request are denied due to the security issues. As an alternative to this, I have heard of using JSON. I tried to use that, but I am unable to get it work. I had also tried the jQuery's $.getJSON() that didnot work as well.
Could you please provide me some working examples for this case?
When i try to make an ajax request like:
I get the following error in the firebug ( Net ): OPTIONS - 405 Method Not Allowed
Is it related to cross-domain request?
I'm making a script that requires cross-domain scripting to get the statuscode of other files. I'm currently using a small PHP script to relay the files from the remote server onto mine. If I want to get the files directly using AJAX, it is not allowed for obvious reasons. I don't want the actual files, I only want to get the status code of that file, and it is going to be either a 404 or a 301. I would've assumed that as the AJAX call is never attempted, the statusCode will be 0, and this is what the actual call variable returns.
However, in Firebug it shows the statuscode next to the request (404 or 301), even if, the call has never been made. Why is the statuscode appearing in Firebug but not in the statuscode variable?
Do you have any idea cross domain xml file access from javascript or using jquery ajax? This is the sample url for google weather
[Code]...
If i use the jQuery library hosted by google am i going to run in to issues using ajax on my site when making requests for data from my server.
View 4 Replies View RelatedI am doing some development using jQuery $.getJson lately and found the following weird scenario.
1. open google chrome without any argument then load a local html file.
2. the local html file will need to have $.getJson[url] .... bla bla bla and jQuery.support.cors = true.
3. data will get loaded
But if you try to load the exact same json data from other domain or localhost, it wouldn't works.
I need to send data through POST to other domain.
My script is:
But I am still getting the error XMLHttpRequest cannot load [url]. Origin [url] is not allowed by Access-Control-Allow-Origin.
XHR finished loading
I set in the destination
I don't know why it dosen't work.