Comments on: Cross-Domain POST With JavaScript

By: serans1

serans1 — Sun, 10 Jul 2011 16:02:23 +0000

Cool trick but kind of missing the point.
you would normally want to do a post to send big data chucks (Get has very small limit) – as you have converted your params to url params along the way you have lost this ability and left with a fancy get.
i need to deliver big chunks of data in a post to different domain and be glad to hear if you have a solution to this.

By: Robb Lovell

Robb Lovell — Sat, 22 Jan 2011 00:41:02 +0000

If you have access to all servers involved, put the following in the header of the reply for the page being requested in the other domain:

PHP:

header(‘Access-Control-Allow-Origin: *’);

For example, in Drupal’s xmlrpc.php code you would do this:

function xmlrpc_server_output($xml) { $xml = ”.”\n”. $xml; header(‘Connection: close’); header(‘Content-Length: ‘. strlen($xml)); header(‘Access-Control-Allow-Origin: *’); header(‘Content-Type: application/x-www-form-urlencoded’); header(‘Date: ‘. date(‘r’)); // $xml = str_replace(“\n”, ” “, $xml);

echo $xml; exit; }

This probably creates a security problem, and you should make sure that you take the appropriate measures to verify the request.

By: 512banque

512banque — Fri, 21 Jan 2011 22:10:10 +0000

BUT the target will see your domain as referer !

By: Help

Help — Thu, 08 Jul 2010 22:20:04 +0000

Hi White Shadow, I dumped in your code hoping to make a cross domain post request but I ended up getting this error in firefox

document.getElementById(“postform”) is null
[Break on this error] document.getElementById(‘postform’).submit();

located in the php file. Any ideas on that?
Thanks this awesome code though.

By: White Shadow

White Shadow — Tue, 07 Jul 2009 21:13:59 +0000

Hmm, I’ve never seen that error before. Maybe it’s something to do with the site you’re trying to send the request to?

By: Mike

Mike — Tue, 07 Jul 2009 20:56:07 +0000

“Not Acceptable

An appropriate representation of the requested resource…”

Any idea why i get this error? I am trying to get the code to work but keep getting it, ive enlarged the iframe to 500×500 and this error is inside, i have the php file simply as 1.php and have changed the reference to it in the script.

By: refresh

refresh — Fri, 05 Jun 2009 23:23:04 +0000

Slight issue with your trick: on refresh or back, the browser will prompt the visitor to resend the post data. Destroying the iframe or the form after the initial POST won’t make a difference.

By: White Shadow

White Shadow — Thu, 11 Dec 2008 15:37:25 +0000

I thought about doing something like that, but the assumption here is that you’re interacting with an external, third-party target that isn’t built to take advantage of this possibility. This whole thing would be much easier if you had control of the script that receives the POST.

By: tadaa

tadaa — Thu, 11 Dec 2008 15:20:00 +0000

You can even try to receive result ;) Script in the iframe can chage parent’s hash in URL so.. before post, run a “listener” (like function called with interval) to watch #hash value, then post, PHP after post should generete a response javascript that will put result in the hash, “listener” function can catch it :)

there is a limitation in url length, but you can split result in smaller chunks