frame problem

acey

hey , currently im having a problem with frames i cannot seem to break

i have the following ,

header("Location: error.php");

  $message="Application error the room you have requested is not accessable.";

and then in error.php i have

 <script language="JavaScript" type="text/javascript">
<!--
if (parent.frames.length > 0) { parent.location.href = location.href; }
-->
</script>

 <h1> Access Denied </h1>
  <p>

 <?

  if(isset($message)) {
 echo "$message";
 }

 ?>

and my frame page

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
<html>
<head>
<title>chat</title>
<meta http-equiv=Content-Type content="text/html; charset=ISO-8859-1">
</head>
<frameset rows="*,100">
<frame src="visual.php?id=<? echo $id ?>" name="main" scrolling=no noresize frameborder=0>
<frame src="send2.php?id=<? echo $id ?>" name="send" scrolling=no noresize frameborder=0>
<noframes>
<body>
</body>
</noframes>
</frameset>
</html>

the error page that i would like to break the frames is only showing in the "main" frame and leaving the send frame there

any ideas ?

MarkR

 header("Location: error.php");

  $message="Application error the room you have requested is not accessable.";

This piece of code will not work. You've misunderstood how PHP works. All variables on the page are totally recreated on each page request, including redirects.

You can't do this.

Perhaps you could pass the message in the query string, e.g.

 $message="Application error the room you have requested is not accessable."; 
 header("Location: error.php?message=" . urlencode($message) );

Then pull the message out of $_GET (But don't forget to escape it with htmlspecialchars, or you could be vulnerable to a XSS attack)

Mark

acey

thanks but that does work