Prev | Current Page 287 | Next

Rich Cannings, Himanshu Dwivedi, Zane Lackey, and Alex Stamos

"Hacking Exposed Web 2.0: Web 2.0 Security Secrets and Solutions"

XAJAX works in the traditional proxy fashion,
with the developer defining which methods are to be exported and then the framework
compiling JavaScript stubs of these methods, which can be called by the client. Methods
Chapter 6: AJAX Types, Discovery, and Parameter Manipulation 155
in XAJAX are usually defined in the first PHP page of the application and are in humanreadable
form, making method discovery in XAJAX generally quite easy. For example,
the methods for an application would generally be defined in www.example.com/
application/index.php.
When XAJAX is used, the client will be served xajax.js. This file contains required
XAJAX methods and by default begins with the following JavaScript:
function Xajax()
{
if (xajaxDebug) this.DebugMessage = function(text)
{ alert("Xajax Debug:\n " + text) };
this.workId = 'xajaxWork'+ new Date().getTime();
this.depth = 0;
XAJAX is available at www.xajaxproject.org.
SAJAX
SAJAX is a proxy framework that, while similar sounding to XAJAX, supports multiple
technologies such as ASP, Cold Fusion, Io, Lua, Perl, PHP, Python, and Ruby. SAJAX also
works in traditional proxy fashion, with the developer defining which methods are to be
exported and then the framework compiling JavaScript stubs of these methods, which
can be called by the client.


Pages:
275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299
news news news news ławka ogrodowa