Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Is AJAX only one way?

Is AJAX only one way?

Scheduled Pinned Locked Moved The Lounge
questionhtmlcomsysadminsecurity
3 Posts 2 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • I Offline
    I Offline
    icestatue
    wrote on last edited by
    #1

    I was writing a small ajax program today when everything was going well. Then it occured to me the whole time I was only reading the XML coming in. Now I wanted to write to it as well. Figuring that from all that I have seen thus far I could look up the save function call in the DOM with a block of code like this. //This xml comes from the server as RealTimeDB.xml xmlResponse.save("http://localhost/AJAXish/RealTimeDB2.xml"); When I got this wonderful error: Microsoft JScript runtime error: Permission denied. Wow I figured, it worked!............. Sorta. The web browser scripting engine recognized the function call of this activeX component but, the security is preventing me from writing to this file. So now the ULTIMATE QUESTION. How do you bypass the web browser security? I haven't come up with an idea yet. But if anyone knows, could you throw me a line. I tried to set all the security properties of this file to full control for every user and group available on my PC. So We must go one step further then this.

    nothing

    S 1 Reply Last reply
    0
    • I icestatue

      I was writing a small ajax program today when everything was going well. Then it occured to me the whole time I was only reading the XML coming in. Now I wanted to write to it as well. Figuring that from all that I have seen thus far I could look up the save function call in the DOM with a block of code like this. //This xml comes from the server as RealTimeDB.xml xmlResponse.save("http://localhost/AJAXish/RealTimeDB2.xml"); When I got this wonderful error: Microsoft JScript runtime error: Permission denied. Wow I figured, it worked!............. Sorta. The web browser scripting engine recognized the function call of this activeX component but, the security is preventing me from writing to this file. So now the ULTIMATE QUESTION. How do you bypass the web browser security? I haven't come up with an idea yet. But if anyone knows, could you throw me a line. I tried to set all the security properties of this file to full control for every user and group available on my PC. So We must go one step further then this.

      nothing

      S Offline
      S Offline
      Shog9 0
      wrote on last edited by
      #2

      icestatue wrote:

      How do you bypass the web browser security?

      We'd really rather you didn't. If you need to send stuff back to the server, there are well-defined protocols for doing so. Have a look in the Web Development forum and i'll bet you'll find mention of some.

      ---- Scripts i’ve known... CPhog 1.8.2 - make CP better. Forum Bookmark 0.2.5 - bookmark forum posts on Pensieve Print forum 0.1.2 - printer-friendly forums Expand all 1.0 - Expand all messages In-place Delete 1.0 - AJAX-style post delete Syntax 0.1 - Syntax highlighting for code blocks in the forums

      I 1 Reply Last reply
      0
      • S Shog9 0

        icestatue wrote:

        How do you bypass the web browser security?

        We'd really rather you didn't. If you need to send stuff back to the server, there are well-defined protocols for doing so. Have a look in the Web Development forum and i'll bet you'll find mention of some.

        ---- Scripts i’ve known... CPhog 1.8.2 - make CP better. Forum Bookmark 0.2.5 - bookmark forum posts on Pensieve Print forum 0.1.2 - printer-friendly forums Expand all 1.0 - Expand all messages In-place Delete 1.0 - AJAX-style post delete Syntax 0.1 - Syntax highlighting for code blocks in the forums

        I Offline
        I Offline
        icestatue
        wrote on last edited by
        #3

        Let me rephrase this. From a clients computer how can we get the changes made to the dom objects persist if that is the intended action? I want the server to do as little as possible and make the client machine do most of the work.

        nothing

        1 Reply Last reply
        0
        Reply
        • Reply as topic
        Log in to reply
        • Oldest to Newest
        • Newest to Oldest
        • Most Votes


        • Login

        • Don't have an account? Register

        • Login or register to search.
        • First post
          Last post
        0
        • Categories
        • Recent
        • Tags
        • Popular
        • World
        • Users
        • Groups