External php query string

edeltatc2

I have found a way to execute an external php script from a static html page and return dynamic information via javascript. But what I am having trouble with is picking up the query string.

Is it possible to pick up the query string from this external script?

laserlight

Yes, I have experimented with this technique before myself.

What have you tried?

edeltatc2

I am having no luck. It appears the php script is being treated as the REQUEST_URI. If there were a way to predefine the uri. I could make this work

laserlight

Here are some files from an online indicator test I wrote back on 19 July 2003:

HTML Page that user will view (test.html):

<html>
<head>
<title>Online Test</title>
</head>
<body>
<script type="text/javascript" src="test.php?name=laserlight"></script>
</body>
</html>

This is test.php, the php script that it interfaces:

<?php
//echo '<script type="text/javascript">';
echo 'document.write("Name: ' . $_GET['name']
	. '<br>IP: ' . $_SERVER['REMOTE_ADDR']
	. '<br>Path: ' . $_SERVER['HTTP_REFERER'] . '");';
//echo '</script>';
?>

Try it and see if it works for you.

edeltatc2

Thanks, this is pretty close to what I was looking for except is there anyway to be able to assign dynamic name value pairs taken from the REQUEST.

example

URL to be accessed:
http://www.somedomain.com/index.html?name=bob

Code on the Destination page:
<html>
<head>
<title>Online Test</title>
</head>
<body>
<script type="text/javascript" src="test.php?name=bob"></script>
</body>
</html>

With the query string for the php script taken from the query string of the present URL (probably using javascript) or if there is a method of extracting the name value pairs from the query string using only the external script. Although it seems the external script treats itself as the REQUEST_URI making some of the enviorment variables from the destination url unreachable.

laserlight

Ok, I think I've solved it, but you may have to write a better query string parser:

test.html

<html>
<head>
<title>Online Test</title>
</head>
<body>
<script type="text/javascript">
var query_string = window.location.search.substring(1);
var pairs = query_string.split("&");
var get_array = new Array;
for (var i = 0; i < pairs.length; i++)
	get_array[i] = pairs[i].split("=");
document.write('<script type="text/javascript" src="test.php?name=' + get_array[0][1] + '">');
</script>
</body>
</html>

test.php

<?php
echo 'document.write("Name: ' . $_GET['name'] . '");';
?>

laserlight

No, it doesnt work right 🙁

That it worked on Mozilla Firefox 0.9.3 could be because I'm exploiting a bug in the parser.

It does not work on MSIE6.

The chief problem seems to be this:
document.write('</script>');
just does not work, prematurely ending the script.
If I convert < to its HTML entity, it doesnt get parsed as javascript.

Either way I lose.

edeltatc2

You might be on to something. It works in netscape 7.02. But still no luck in IE6.