Domuk No, not an
issue with
the PHP - I
was
responding
to "AJAX not
being cross
site is
annoying"
MaxMouse Really? i
thought that
would only
be important
if the user
had some
kind of
control over
where the
XML came
from, if you
hard code it
(As in a PHP
file)
wouldn't
that
eliminate
XSS attacks?
Domuk Yes, but
very, very
necessary.
AJAX
requests run
in the
context of
the browser,
there'd be
no security
if it was
cross-domain
.
MaxMouse AJAX not
being cross
site is
annoying,
all other
scripts can
be used in
that way,
having to
resort to
PHP to patch
it is a
shame.
They'll get harder (A lot harder) the important thing to remember is (and Iv'e been a victim of this, ask Domuk or SAJ) even if a challenge looks impossible (and some do), and you begin to sit back and think, "No, this is above me, i simply can't do it" you need to ignore that thought and replace it with "I can do this, I'm just missing something, lets look at it from a different angle, or maybe start completely from scratch", because you'll learn about it, and eventually you'll pass it, thus increasing your skillset :)
Copyright Open Source Institute, 2006 