Why cross domain ajax post doesn't work?

Question

I am trying to send data to form site1 from site2 . But I get errors and the answer does not come back , what am I doing wrong? This is code ajax POST

  $.ajax({
  url: "site1/form.php",
    crossDomain: true,
    type: "POST",
    data: {a: 'a1'},
    contentType: "application/json; charset=utf-8;",
    async: false,
    dataType: 'jsonp',
    success: function(data){
        console.log('callback success');
        console.log(data);
    },
    error: function(xhr, status, error) {
        console.log(status + '; ' + error);
    }
});

and this is form from site1

$a= $_POST['a']; echo $a;

What could be wrong? Titles on site1 in .htaccess I ordered ..

first you have a relative url that points to your site,second does the ajaxed site allow cross domain acces? — madalinivascu, Nov 17 '15 at 06:00
In .htaccess site1 this `Header add Access-Control-Allow-Origin "*" Header add Access-Control-Allow-Headers "origin, x-requested-with, content-type" Header add Access-Control-Allow-Methods "GET, POST" ` — Seintero, Nov 17 '15 at 06:13

score 0 · Answer 1 · answered Nov 17 '15 at 06:12

In cross domain ajax request modern browser send a preflight request to domain before making a actual request with method option. If you define custom header (in your case you have defined content-type) than it will be blocked. You can allow all request or particular domain in your remote server to accept all type request(in apache you can do it in htaccess and in IIS server you have to change webconfig.xml .

score 0 · Answer 2 · edited May 23 '17 at 12:23

0

For obvious security reasons. Refer CORS. Cross-domain ajax request are forbidden by default, you can enable them, but it's a risk, as any other site can access your data on behalf of their users.

Do refer to this answer for security reasons.

edited May 23 '17 at 12:23

Community

1
1

answered Nov 17 '15 at 06:47

1binary0

93
11

Why cross domain ajax post doesn't work?

2 Answers2