Re: Pass varible with out URL and SESSION

From	Jerry Stuckle <jstucklex@attglobal.net>
Newsgroups	comp.lang.php
Subject	Re: Pass varible with out URL and SESSION
Date	2012-12-24 20:23 -0500
Organization	A noiseless patient Spider
Message-ID	<kbav76$ea8$1@dont-email.me> (permalink)
References	(7 earlier) <TgVBs.744755$9H4.287269@fx17.am4> <kb9le6$34s$1@dont-email.me> <kba0in$lnb$1@dont-email.me> <kba8gh$mv3$1@dont-email.me> <kbakra$lmv$1@dont-email.me>

Show all headers | View raw

On 12/24/2012 5:26 PM, Denis McMahon wrote:
> On Mon, 24 Dec 2012 13:56:17 -0500, Jerry Stuckle wrote:
>
>> On 12/24/2012 11:40 AM, Denis McMahon wrote:
>>> On Mon, 24 Dec 2012 08:30:45 -0500, Jerry Stuckle wrote:
>>>
>>>> On 12/24/2012 4:30 AM, Andy wrote:
>>>>>> well exactly. There are only three ways to keep track of a browser
>>>>>> state between pages: cookie, GET or POST.
>>>>>
>>>>> In the words of Yoda "There is another"...
>>>>>
>>>>> You guys won't like it but I thought it worth mentioning that you can
>>>>> also use a hidden frame and store any variable to be passed back to
>>>>> the next content page.
>>>
>>>> Which still comes back in the GET or POST values, as applicable.
>>>
>>> I think Andy is suggesting a client side method that uses javascript to
>>> store a variable in a higher level frame between page loads. This could
>>> be used to pass data between the javascript code running in two pages
>>> on a client without passing the data through the server.
>>>
>>> It's a similar approach to using js to create a cookie on the client
>>> side that can be read by js in another page on the client side, to pass
>>> data between pages on the client side without relying on the server.
>>>
>>> However, as we already agreed (I think), until we have more information
>>> about what the OP actually wants to do, and specifically whether he's
>>> trying to pass state information between pages on the client or on the
>>> server, it's a bit pointless debating the ins and outs of the various
>>> possible methods.
>
>> But it's still passed back to the server via POST or GET.  All he's
>> suggesting is a different way of storing it on the client (i.e. instead
>> of a hidden field in a form).
>
> No, he's suggesting a way to pass data from a client side script running
> in one page on the client to a client page script running in another page
> on the client *without* going back through the server at all.
>
> Scenario:
>
> A frameset has javascript methods set( param, value ) and get(param)
>
> Any pages loaded into a subframe of that frameset, from the same host (xss
> restrictions will apply if the page is from a different host) can call
> the set and get methods in the parent frameset to store / retrieve values
> that will never be passed through the server.
>
> I once wrote a shopping catalogue that ran 100% in client side javascript
> doing this, for someone who was running on a hosting provider that only
> made a basic mailform cgi available. Customers could browse the
> catalogue, pick out their goods, and then mail their shopping list to the
> company using the mailform cgi.
>
> The (mom & pop) company would then contact the customer, confirm the
> requirement, put it on their van and deliver it, collecting payment when
> they delivered.
>
> The only time that any "data" apart from plain page requests got sent to
> the server was after the complete order had been assembled, when it was
> sent to the mailform cgi on the server, and that could have been avoided
> by generating a mail uri that would have launched the default mail
> application on the client computer and populate the message text.
>
> The same can be done with a javascript cookie, although the cookie in
> that case does get sent to the server the server just discards it, but
> the javascript in different pages from the same host (again security
> constraints apply) on the client can read and write the cookie and use it
> to pass data values between themselves.
>

Which is just another way of storing data on the client.  It doesn't do 
a bit of good getting data back to the server so PHP can act on it - cgi 
or otherwise.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

Thread

Pass varible with out  URL and SESSION Biju S <biju@pixnnova.com> - 2012-12-22 01:18 -0800
  Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 10:24 +0100
    Re: Pass varible with out  URL and SESSION Luuk <luuk@invalid.lan> - 2012-12-22 11:05 +0100
      Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 11:37 +0100
        Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 11:40 +0100
          Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 12:29 +0000
            Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-22 12:21 -0500
              Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 22:55 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 18:03 -0500
                Re: Pass varible with out  URL and SESSION Luuk <luuk@invalid.lan> - 2012-12-23 08:56 +0100
                Re: Pass varible with out  URL and SESSION houghi <houghi@houghi.org.invalid> - 2012-12-23 15:25 +0100
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-23 11:21 -0500
                Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-23 12:27 -0500
                Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-23 18:45 +0100
  Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-22 13:15 +0000
    Re: Pass varible with out  URL and SESSION Scott Johnson <noonehome@chalupasworld.com> - 2012-12-22 05:26 -0800
      Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 14:43 +0000
        Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-22 12:23 -0500
          Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-22 21:55 +0100
            Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-22 22:56 +0000
              Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-23 18:02 +0100
          Re: Pass varible with out  URL and SESSION Gregor Kofler <usenet@gregorkofler.com> - 2012-12-23 00:43 +0100
            Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-23 00:09 +0000
              Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-24 09:30 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 08:30 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-24 16:40 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 13:56 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-24 22:26 +0000
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-24 23:30 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 20:23 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-25 12:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:41 -0500
                Re: Pass varible with out  URL and SESSION "Peter H. Coffin" <hellsop@ninehells.com> - 2012-12-25 10:14 -0600
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-25 19:25 +0000
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-26 01:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 20:36 -0500
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-26 02:21 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 21:47 -0500
                Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-25 10:03 +0000
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-25 10:31 +0000
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-25 13:10 +0100
                Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-25 13:23 +0000
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-25 16:08 +0100
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:44 -0500
                Re: Pass varible with out  URL and SESSION "Andy" <andy@NOSPAMmanyplay.com> - 2012-12-27 09:22 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 08:42 -0500
                Re: Pass varible with out  URL and SESSION adrian@poppyrecords.invalid.invalid (Adrian Tuddenham) - 2012-12-24 13:41 +0000
                Re: Pass varible with out  URL and SESSION Scott Johnson <noonehome@chalupasworld.com> - 2012-12-24 06:23 -0800
                Re: Pass varible with out  URL and SESSION adrian@poppyrecords.invalid.invalid (Adrian Tuddenham) - 2012-12-24 15:43 +0000
                Re: Pass varible with out  URL and SESSION "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-12-24 17:07 +0100
                Re: Pass varible with out  URL and SESSION "J.O. Aho" <user@example.net> - 2012-12-24 22:36 +0100
                Re: Pass varible with out  URL and SESSION The Natural Philosopher <tnp@invalid.invalid> - 2012-12-24 23:25 +0000
                Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-24 20:25 -0500
            Re: Pass varible with out  URL and SESSION "Twayne" <nobody@devnull.spamcop.net> - 2012-12-23 12:37 -0500
              Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-23 13:36 -0500
    Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 09:32 -0500
      Re: Pass varible with out  URL and SESSION Denis McMahon <denismfmcmahon@gmail.com> - 2012-12-22 18:09 +0000
        Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 13:45 -0500
  Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-22 08:25 -0500
  Re: Pass varible with out  URL and SESSION Gregor Kofler <usenet@gregorkofler.com> - 2012-12-22 17:35 +0100
  Re: Pass varible with out  URL and SESSION email.nandkishore@gmail.com - 2012-12-22 09:51 -0800
  Re: Pass varible with out  URL and SESSION Biju S <biju@pixnnova.com> - 2012-12-25 07:20 -0800
    Re: Pass varible with out  URL and SESSION Jerry Stuckle <jstucklex@attglobal.net> - 2012-12-25 11:40 -0500

csiph-web