Domuk No, not an
issue with
the PHP - I
was
responding
to "AJAX not
being cross
site is
annoying"
MaxMouse Really? i
thought that
would only
be important
if the user
had some
kind of
control over
where the
XML came
from, if you
hard code it
(As in a PHP
file)
wouldn't
that
eliminate
XSS attacks?
Domuk Yes, but
very, very
necessary.
AJAX
requests run
in the
context of
the browser,
there'd be
no security
if it was
cross-domain
.
MaxMouse AJAX not
being cross
site is
annoying,
all other
scripts can
be used in
that way,
having to
resort to
PHP to patch
it is a
shame.
OSIX is a non-profit organisation completely supported by you, the members and think12's guinea pig farm.
We survive by donations of time and money by the members of the community that enjoy hanging here and using the services and challenges we have built up over the years.
We have to pay our bills every month to keep things going. You can help by contributing to the community, at the same time as getting an OSI email address or an IRC bouncer, as we shower every donator with OSI site reward points.
Special Offer - Pop Email Accounts
yourname@osix.net pop email accounts to everyone who donates $10 or more. Simply make the donation and you will receive your email login details.
Copyright Open Source Institute, 2006 