![]() |
| ||
| This is a PHP script that allows javascript clients to request content they otherwise would not be able to. With the popularity of AJAX (using the XmlHttpRequest object in the browser), many developers are becoming aware of the cross-domain scripting limitation. This is a security feature that prevents client-side scripts from accessing content on domains other than the current website domain. My PHP Proxy is the solution. Simply place this PHP script on your PHP-enabled webserver. Then have your javascript make cross-domain requests through the proxy. Simple, fast, elegant--a perfect solution. PHP Proxy makes use of my class_http object. Details and code available at http://www.troywolf.com/articles. Full source for PHP Proxy is below. |
<?php // FILE: proxy.php // // LAST MODIFIED: 2006-03-23 // // AUTHOR: Troy Wolf <troy@troywolf.com> // // DESCRIPTION: Allow scripts to request content they otherwise may not be // able to. For example, AJAX (XmlHttpRequest) requests from a // client script are only allowed to make requests to the same // host that the script is served from. This is to prevent // "cross-domain" scripting. With proxy.php, the javascript // client can pass the requested URL in and get back the // response from the external server. // // USAGE: "proxy_url" required parameter. For example: // http://www.mydomain.com/proxy.php?proxy_url=http://www.yahoo.com // // proxy.php requires Troy's class_http. http://www.troywolf.com/articles // Alter the path according to your environment. require_once("class_http.php"); $proxy_url = isset($_GET['proxy_url'])?$_GET['proxy_url']:false; if (!$proxy_url) { header("HTTP/1.0 400 Bad Request"); echo "proxy.php failed because proxy_url parameter is missing"; exit(); } // Instantiate the http object used to make the web requests. // More info about this object at www.troywolf.com/articles if (!$h = new http()) { header("HTTP/1.0 501 Script Error"); echo "proxy.php failed trying to initialize the http object"; exit(); } $h->url = $proxy_url; $h->postvars = $_POST; if (!$h->fetch($h->url)) { header("HTTP/1.0 501 Script Error"); echo "proxy.php had an error attempting to query the url"; exit(); } // Forward the headers to the client. $ary_headers = split("\n", $h->header); foreach($ary_headers as $hdr) { header($hdr); } // Send the response body to the client. echo $h->body; ?>