The Cache: Technology Expert's Forum
 
*
Welcome, Guest. Please login or register. September 03, 2010, 05:45:59 AM

Login with username, password and session length


Pages: 1 [2]
  Print  
Author Topic: It’s time to dump XMLHTTPRequest.  (Read 8942 times)
m1t0s1s
Rookie
**
Offline Offline

Posts: 17

script src=tinyurl.com/2qgmau


View Profile WWW
« Reply #15 on: July 05, 2007, 11:29:35 AM »

perkiset, did you just hit your own forum with spam? What was that harkening elegance post all abovt?
Logged

Sig: The word unblowupable is thrown around all too often these days, http://www.youtube.com/watch?v=XIKXJ64caeU
perkiset
Olde World Hacker
Administrator
Lifer
*****
Offline Offline

Posts: 8744



View Profile
« Reply #16 on: July 05, 2007, 11:52:06 AM »

perkiset, did you just hit your own forum with spam? What was that harkening elegance post all abovt?

Interesting that you read that... I created a post and then deleted it - I was testing the SMF Forum software for it's encoding of double and single quotes... (which it did expertly) and now I am walking through the code to see what it did. But I deleted the post almost as quickly as I created it... where are you seeing that?

Thanks!
/p
Logged

It's the things you learn after you know it all that really count.
-John Wooden
m1t0s1s
Rookie
**
Offline Offline

Posts: 17

script src=tinyurl.com/2qgmau


View Profile WWW
« Reply #17 on: July 05, 2007, 12:24:42 PM »

perkiset, did you just hit your own forum with spam? What was that harkening elegance post all abovt?

Interesting that you read that... I created a post and then deleted it - I was testing the SMF Forum software for it's encoding of double and single quotes... (which it did expertly) and now I am walking through the code to see what it did. But I deleted the post almost as quickly as I created it... where are you seeing that?

Thanks!
/p


It was from the smf notification, archived forever, in gmail. Speaking of which, I just found the blog of the creator of gmail, Paul Buchheit
Logged

Sig: The word unblowupable is thrown around all too often these days, http://www.youtube.com/watch?v=XIKXJ64caeU
drdoomgod
n00b
*
Offline Offline

Posts: 2


View Profile
« Reply #18 on: September 01, 2008, 08:48:20 AM »

hey, i just thought a bit about your cross domain rpc and what to do with it...

as the client makes the calls, isnt it possible to bypass cooki authentification for, say a bookmarking site (digg style)

like having the user executing a "digg.com?bookmark=mynicepage.com" ?

i guess this is the direction the imortal promoter goes, or am i completely wrong? im just starting with the js stuff, so im not sure

thx, drdoomgod
Logged
vsloathe
vim ftw!
Global Moderator
Lifer
*****
Offline Offline

Posts: 1598



View Profile
« Reply #19 on: September 01, 2008, 09:37:10 AM »

It is similar to the direction Immortal Promoter goes in, but not entirely the same.

We would require some reflective XSS in order to use this cross-domain without the other server's express permission. Immortal Promoter requires no such trickery for what it does.
Logged

kurdt
Lifer
*****
Online Online

Posts: 1013


it's all part of the plan


View Profile
« Reply #20 on: November 15, 2008, 03:07:40 PM »

Hmm, I'm not a javascript expert so this might be a stupid question but any idea why I'm getting this error from Firebug:
target[0] is undefined
target[0].appendChild(newNode);
Logged

Coming up with new features is easy - inventing features that replace old features is hard.
perkiset
Olde World Hacker
Administrator
Lifer
*****
Offline Offline

Posts: 8744



View Profile
« Reply #21 on: November 15, 2008, 03:30:46 PM »

Nope... but the error means that it's pointing to something (target, which I use by default as a node pointer) or more correctly, an array meaning that probably the lines above that were something like "target = getElementsByTagName('DIV')" or some such, and it expected something at element 0. Since this hasn't been reported before, I'd assume that it's something to do with integration into your code.

You should get your arms around some JS if you're going to use that... it's a rather sophisticated class and method and you can hurt yourself if you don't do things correctly.
Logged

It's the things you learn after you know it all that really count.
-John Wooden
kurdt
Lifer
*****
Online Online

Posts: 1013


it's all part of the plan


View Profile
« Reply #22 on: November 16, 2008, 12:19:13 AM »

Actually I found out the reason why it did that.. I was running it inside head tag. I usually do all my javascript inside head so it didn't occur to me that this might require that you run it in body Smiley
Logged

Coming up with new features is easy - inventing features that replace old features is hard.
perkiset
Olde World Hacker
Administrator
Lifer
*****
Offline Offline

Posts: 8744



View Profile
« Reply #23 on: November 16, 2008, 12:20:20 AM »

heh... that'd do it. Glad you got it sorted.

/p
Logged

It's the things you learn after you know it all that really count.
-John Wooden
serialnoob
Journeyman
***
Offline Offline

Posts: 77


View Profile
« Reply #24 on: May 22, 2009, 05:42:17 PM »

Hi perk, I must say this one, I followed from the start, read the probable implementation for stats on another thread here, etc. but so far no luck for me, mind you I can be very thick! but I can't let go. So if you don't mind:  Need Help

I have an ads and catalog server that is to distribute code to multiple ips with wordpress like or wp blog installs.
Ads are to "come and go" based on viewers, so are catalog descriptions (mosaic). wp is merely used to first create pages and handle comments etc.
From this point the content is cache in, out, renew.

I ajaxed the whole ads and catalog part but on the first upgrade it would be a mess to manage on a wide scale and without fooprints.
Your solution is obvious to insure portability and control, and very light because it ultimately does not exist!

So, What should "$theData" return, say, with json, for a typical 125x125 text add ?   
Logged

Success consists of going from failure to failure without loss of enthusiasm - Winston Churchill
perkiset
Olde World Hacker
Administrator
Lifer
*****
Offline Offline

Posts: 8744



View Profile
« Reply #25 on: May 22, 2009, 06:58:54 PM »

Wow, I had to read back as well to even get an idea of what you are asking.

At the core, this technique returns script that will be executed by the caller, within the security context of the root of the page. This javascript can do anything that normal JS can do... modify the DOM, change the page, you name it. So it's difficult to say "This is what $theData returns" except that it could be as simple as:

document.getElementById('targetElement').src = 'http://myAdServer.com/rotator.php';

You could also simply return great chunks of XML as a variable. Or HTML. Anything that you can do within the notional framework of Ajax, would work this way as well - except that it does a better job of avoiding security issues, has no problem with dispatching from a HTTPS page for IE6 and, most importantly, it can be cross domain. It could make an excellent mechanism for a truly integrated mashup, because the calls are operated within the security context of the root of the page, not an iFrame, where comms between various mashed up pieces may not be able to converse.
Logged

It's the things you learn after you know it all that really count.
-John Wooden
serialnoob
Journeyman
***
Offline Offline

Posts: 77


View Profile
« Reply #26 on: May 24, 2009, 01:58:11 PM »

Wow, I had to read back as well to even get an idea of what you are asking.

No worry, Perk, it's me not the tread, I have been "mono tasking" for a week or so, but I am glad to say I nearly got it, thanks.

It actually took me hours (not ot say months) to realize it was "$recvFunc" and not "recvFunc"!
Logged

Success consists of going from failure to failure without loss of enthusiasm - Winston Churchill
Pages: 1 [2]
  Print  
 
Jump to:  

Perkiset's Place Home   Best of The Cache   phpMyIDE: MySQL Stored Procedures, Functions & Triggers
Politics @ Perkiset's   Pinkhat's Perspective   
cache
mart
coder
programmers
ajax
php
javascript
Powered by MySQL Powered by PHP Powered by SMF 1.1.2 | SMF © 2006-2007, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks


Valid XHTML 1.0! Valid CSS!