homepage Welcome to WebmasterWorld Guest from 23.22.128.96
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Pubcon Platinum Sponsor 2014
Home / Forums Index / Code, Content, and Presentation / HTML
Forum Library, Charter, Moderators: incrediBILL

HTML Forum

    
Access Denied!
Frame Redirect causing ACCESS DENIED!
Dr_DK




msg:601286
 2:45 am on Apr 11, 2003 (gmt 0)

Hello all,

I just can't seem to get to bottom of this!
I'm using Frame Redirect for one of my domains. When I insert this following code into the page:

<script language="JavaScript">
<!--
document.write("<img src=\"http://mypathishere/log.cgi?ref="+top.document.referrer+"\" width=1 height=1 border=0>");
//-->
</script>
<noscript>
<img src="http://mypathishere/log.cgi?ref=noscript" width=1 height=1 border=0>
</noscript>

Then when I access the domain name, on the status bar I get the error stating "Access Denied"! I've tryed all kinds of stuff, and nothing works! So the only way out of this I'm thinking is to ask the domain name people to add that piece of code with the Frameset code? It works fine if I access the page with it's regular URL! It's just messing up on the Domains Frame Redirect!
Does anyone know any other way out of this one?
Any help greatly appreciated!
Thanks.
Sincerely,
Dr. DK

 

Xuefer




msg:601287
 3:05 am on Apr 11, 2003 (gmt 0)

it's top.document.referrer that cause access denied
not log.cgi

Dr_DK




msg:601288
 3:22 am on Apr 11, 2003 (gmt 0)

How would you fix it?

Dr_DK




msg:601289
 7:56 pm on Apr 11, 2003 (gmt 0)

I've tryed to put:

top.main

instead of

top.document.referrer

But I get the referrers as undefined!

Is there any other way to maintain the top.document.referrer? but to get rid of the error?

Thanks! Any help appreciated!

joshie76




msg:601290
 10:08 am on Apr 12, 2003 (gmt 0)

Are the two pages that you're trying to work between belonging to different domains?

This simply isn't allowed - you can't communicate with a page belonging to "www.joshie67.com" from a page belonging to "www.joshtwist.com" - even if I owned both domains - this leads to an Access Denied error.

(This is an important security feature - I could set up a link to a banking site and have a hidden frameset surrounding their login page, I could then grab visitors username and password using script running in my hidden frame)

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Code, Content, and Presentation / HTML
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved