How to use Ajax to inject specific PHP function using URL, or other method?

Question

I'm moving from the realm of just JS to php and Ajax. I've dabbled some with PHP in the past. I really appreciate how much help stackoverflow has been in helping me with basic questions.

let says I have a div called #divName.

I use the following JS for Ajax. Some of this is just pseudo code.

var request = false;
   try {
     request = new XMLHttpRequest();
   } catch (trymicrosoft) {
     try {
       request = new ActiveXObject("Msxml2.XMLHTTP");
     } catch (othermicrosoft) {
       try {
         request = new ActiveXObject("Microsoft.XMLHTTP");
       } catch (failed) {
         request = false;
       }  
     }
   }

   if (!request)
     alert("Error initializing XMLHttpRequest!");

   function getAjaxInfo(<name of the php function???>) { //<<<<< this is the function I need help with
    var myFunction= nameOfPHPfunctionIJustGot;
     var url = "filename.php?func=" + myFunction;
     request.open("GET", url, true);
     request.onreadystatechange = updatePage;
     request.send(null);
   }

  function updatePage() {
     if (request.readyState == 4) {
       if (request.status == 200) {
         var response = request.responseText;
             document.getElementById("divName").innerHTML = response; //probably going to use Jquery append here, but this example works.
               } else
         alert("status is " + request.status);
     }
   }

The I have my fileName.php file:

<?php

function header() { ?>
   header content goes here
<?php }

function footer() { ?>
    footer content goes here
<?php }

?>

My goal is that when I execute getAjaxInfo(), I can pull whatever PHP function I want.

So lets say if I do a onClick="getAjaxInfo(header)" it will get the php header function, apply it to a javascript function, and then apply that to a div.

Any help would be appreciated!

mck89 · Accepted Answer · 2010-01-22 15:58:39Z

2

Try with:

$func=$_GET['func'];
if(function_exists($func)) $func();

In this way you get the function name passed by GET and the execute it.

If you want to be able to call only certain functions:

$allowedFunctions=array("header","footer");
$func=$_GET['func'];
if(in_array($func,$allowedFunctions) && function_exists($func)) $func();

edited Jan 22, 2010 at 15:58

answered Jan 22, 2010 at 15:51

mck89

19.3k17 gold badges93 silver badges111 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

VolkerK Over a year ago

But in you probably want to use some sort of whiteliste instead of allowing calls to arbitrary functions (even if you limit it to parameter-less functions)

sprugman Over a year ago

Grr... I was just in the middle of writing that exact code. Ya beat me to it. :) Also, as long as you have jquery around, I'd strongly recommend using it's ajax functions, rather than rolling your own.

Jared Over a year ago

ha! I didn't even think to check if jquery had ajax functions...drr

Jared Over a year ago

Just a note - remember I'm a major noob. I understand code when it's put before me, but I have no idea how to plug that into the code I provided.

mck89 Over a year ago

Write that code when you want to call the function. Put it at the end of the file and it will work.

|

sprugman · Accepted Answer · 2010-01-22 15:56:35Z

2

Picking up on @VolkerK's suggestion, and adding a failure function:

$func = $_GET['func'];
$allowed = array('header', 'footer');
if (in_array($func, $allowed) && function_exists($func)) $func();
else default_action();

answered Jan 22, 2010 at 15:56

sprugman

19.9k36 gold badges116 silver badges165 bronze badges

Comments

Decent Dabbler · Accepted Answer · 2010-01-22 16:02:55Z

2

<?php

$allowedFunctions = array(
   'header',
   'footer'
);

$functionName = $_GET[ 'func' ];

if( in_array( $functionName, $allowedFunctions ) && function_exists( $functionName ) )
{
    $functionName();
}

/* your function definitions */
?>

$allowedFunctions is a whitelist array of user defined (i.o.w. your) php functions that you want the ajax call to allow to execute. If you don't keep this whitelist, your script will be potentially dangerous, since it would allow anyone to execute an arbitrary function. That is something you definately do not want.

edited Jan 22, 2010 at 16:02

answered Jan 22, 2010 at 15:57

Decent Dabbler

22.8k11 gold badges77 silver badges107 bronze badges

Collectives™ on Stack Overflow

How to use Ajax to inject specific PHP function using URL, or other method?

3 Answers 3

7 Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

7 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related