[sharijl]

I have one Iframe named "ticket" and I want to use it for two different actions. My onsubmit action calls the iframe and does some other things.

Code:

 
            ticketwin = document.getElementById("ticket");
            page = ticketwin.contentWindow.document;
            doc.open();
            var compiledtext;
            with(doc){
            compiledtext = "<FONT SIZE=4>Ticket: " + form.MDN.value + "</FONT>";  
                        writeln(compiledtext);
            }
            doc.close;

This works fine except after I have executed this onclick action:

Code:

function ChangePage(Opt_List) 
           { 
           var number = form.MDN.value;
           window.open("http://page.com/Query.do?MDN=" + number, "ticket"); 
           }

If I do this first then I get a Javascript error "Access Denied" performing the onsubmit action.

first script compiles some code and prints it out in the iframe and the other code takes a variable and uses it to query another page in the same iframe. It seems these two conflict on the window.open because after I open the link in the frame I can't get control of the frame again to print the text. It works fine if I have two seperate iframes but I don't want that. Any ideas?

[Dwagar]

Is the page your referencing in the iframe contain javascript that might be referencing the perant window.

The error means there is javascript being reference across a different domain, if everything is on the same domain (.com) it should work.

When I reference an iframe before I did

ticket.document.location.href='url'

instead of window.open, not sure which one is more efficient.

I hope this helps ou out.

[sharijl]

The page is accessing a different server and that is crazy that Javascript can not go back and forth like this, but your incite on the error gave me the path the the solution.

I created a PHP page on my server with an iframe linking to the external server's page. Using PHP I grabbed the variable and echoed it into the iframes src and it works like a charm.

[TwoD]

It's not crazy as it's for security reasons. If cross-domain access was allowed, I could easily craft a script which grabs say session data from all users on a site, or even create a keylogger, and then sends all gathered data to my own site. Given that I can inject it on your site or one accessed via it.

Yes, you'll have to use a serverside script to "bounce" off-site access, as you can have greater control that way.