javascript - HTTP Post to an XML file

newcents · Jan 12, 2008

I've spent a week on this javascript code. It works locally. I can't get it to work on discountasp.net servers. I sent a message to the admin and this was his response:

'I checked the HTTP log and see that your application is trying to make a HTTP Post to an XML file which is not supported.'

Here is the code (have fun I sure did ):

Anyone know any work arounds?

<scripttype='text/javascript'>

var_cBox=null;

var_shift=596;
var_duration=1500;
varfx=null;
var_scroll=false;
var_where=0;
els=[];

varitems=[];
varpath2items='items.xml';

var_popup_title=null;
var_popup_text=null;
var_popup_link=null;
var_popup_active=null;

functioninitMarquee(){
_cBox=$('marquee');
if(_cBox)
{
getMRequest(path2items,'key='+escape(searchInput.value));
}
}

varaddItems=function(_items){
items=_items;
_cBox.innerHTML='';
for(i=0;i<5;i++)
{
addItem(i,0);
}
makeCarousel();
}

functionaddItem(_index,where){
varli=document.createElement('li');
li._index=_index;
li.innerHTML='<imgsrc='images/carousel/'+items[_index].src+''alt=''/>';
li.innerHTML+='<ahref='#'class='info'onclick='openPopup(this,'+_index+');returnfalse;'>Info</a>';
if(_index==2)
{
li.className='active';
}
if(where){
varnode=_cBox.getElements('li')[0];
_cBox.insertBefore(li,node);
}
else{
_cBox.appendChild(li);
}
}

functionmakeCarousel(){
fx=newFx.Styles(_cBox,{
duration:_duration,
wait:true,
onStart:function(element){
_scroll=false;
els.each(function(el,i){
el.className='';
},element);
hs.close(this);
},
onComplete:function(element){
if(_where==0)
{
els[0].remove();
if(items[els._index+1])
{
addItem(els._index+1,0);
}
else
{
addItem(0,0);
}
}
if(_where==1)
{
els.remove();
if(items[els[0]._index-1])
{
addItem(els[0]._index-1,1);
}
else
{
addItem(items.length-1,1);
}
}
els=element.getElements('li');
els.className='active';

element.setStyle('left',-1092);

_popup_title.innerHTML=items[els._index].name;
_popup_text.innerHTML=items[els._index].description;
_popup_link.href=items[els._index].url;

_scroll=true;
}
},_cBox);

$('marquee-left').onclick=function(){
if(_scroll){
_where=1;
_scroll=false;
fx.start({
'left':-500
});

}
};
$('marquee-right').onclick=function(){
if(_scroll){
_where=0;
_scroll=false;
fx.start({
'left':-1688
});
}
};
els=_cBox.getElements('li');
_scroll=true;

_popup_title=$('ptitle');
_popup_text=$('ptext');
_popup_link=$('plink');
}

functionopenPopup(link,_index){

_popup_title.innerHTML=items[_index].name;
_popup_text.innerHTML=items[_index].description;
_popup_link.href=items[_index].url;
if(!_popup_active)
{
_popup_active=link;
}
hs.htmlExpand(_popup_active,{contentId:'popup'});
}

if(window.addEventListener){
window.addEventListener('load',initMarquee,false);
}
elseif(window.attachEvent){
window.attachEvent('onload',initMarquee);
}

functiongetMRequest(url,params,_onload)
{
varhttpRequest=false;

if(window.XMLHttpRequest)
{
httpRequest=newXMLHttpRequest();
if(httpRequest.overrideMimeType)
{
httpRequest.overrideMimeType('application/json');
}
}
elseif(window.ActiveXObject)
{
try
{
httpRequest=newActiveXObject('Msxml2.XMLHTTP');
}
catch(e)
{
try
{
httpRequest=newActiveXObject('Microsoft.XMLHTTP');
}
catch(e)
{
}
}
}

if(!httpRequest)
{
alert('Unfortunatellyyoubrowserdoesn\'tsupportthisfeature.');
returnfalse;
}

httpRequest.onreadystatechange=function()
{
if(httpRequest.readyState==4)
{
if(httpRequest.status==200||httpRequest.status==0)
{
processMResponce(httpRequest.responseText);
}
else
{
alert('Therewasaproblemwiththerequest.(Code:'+httpRequest.status+')');
}
}
}

if(params==undefined||params==null)
{
httpRequest.open('GET',url,true);
httpRequest.send(null);
}
else
{
httpRequest.open('POST',url,true);
httpRequest.setRequestHeader('Content-type','application/x-www-form-urlencoded');
httpRequest.setRequestHeader('Content-length',params.length);
httpRequest.setRequestHeader('Connection','close');
httpRequest.send(params);
}
}

functionprocessMResponce(answer)
{
if(typeofanswer=='string')
{
json=eval(''+answer+'');
}
else
{
json=answer;
}
if(json.length>0)
{
addItems(json);
}
}

</script>

</CODE>
Click to expand...

wisemx · Jan 12, 2008

When we can so easily write to XML files in the .NET Framework why do this?
I'd side with anyone who considers this a client side hack.
Do any of us want that hole in our servers? Hope not.
Salute,
Mark

Bruce · Jan 14, 2008

Are you running IIS on your computer or are you running the ASP.NET development web server?

As Mark was saying, it is really insecure to allow post to an XML file because that will allow anyone to over write your file.

Bruce

DiscountASP.NET
www.DiscountASP.NET

Log in or Sign up

javascript - HTTP Post to an XML file

newcents

wisemx

Bruce DiscountASP.NET Staff

Share This Page

Log in or Sign up

javascript - HTTP Post to an XML file

newcents

wisemx

Bruce DiscountASP.NET Staff

Share This Page

Useful Searches