Files
pokemon-showdown-client/crossdomain.php
2013-04-07 02:30:02 -06:00

64 lines
1.8 KiB
PHP

<?php
// This file allows psim.us to use the cookies and localStorage
// from play.pokemonshowdown.com.
// Never cache.
header('Cache-Control: no-cache, no-store, must-revalidate'); // HTTP 1.1.
header('Pragma: no-cache'); // HTTP 1.0.
header('Expires: 0'); // Proxies.
$prefix = strval(@$_REQUEST['prefix']);
// Need to check the form of $prefix to avoid some vulnerabilities.
// This check should be robust enough for now.
if (!preg_match('/^[a-zA-Z0-9-_\.]*$/', $prefix)) {
die();
}
$origin = 'http://' . $prefix . '.psim.us';
?>
<!DOCTYPE html>
<script src="/js/jquery-1.9.0.min.js"></script>
<script src="/js/jquery-cookie.js"></script>
<script src="/js/jquery.json-2.3.min.js"></script>
<script>
(function() {
var origin = <?php echo json_encode($origin) ?>;
var postMessage = function(message) {
return window.parent.postMessage($.toJSON(message), origin);
};
$(window).on('message', function($e) {
var e = $e.originalEvent;
if (e.origin !== origin) return;
var data = $.parseJSON(e.data);
if (data.username) {
$.cookie('showdown_username', data.username, {expires: 14});
}
if (data.get) {
$.get(data.get[0], function(ajaxdata) {
postMessage({ajax: [data.get[1], ajaxdata]});
}, data.get[2]);
}
if (data.post) {
$.post(data.post[0], data.post[1], function(ajaxdata) {
postMessage({ajax: [data.post[2], ajaxdata]});
}, data.post[3]);
}
if (data.teams) {
localStorage.setItem('showdown_teams', data.teams);
}
if (data.prefs) {
localStorage.setItem('showdown_prefs', data.prefs);
}
});
var message = {init: true};
try {
if (window.localStorage) {
message.teams = localStorage.getItem('showdown_teams');
message.prefs = localStorage.getItem('showdown_prefs');
}
} catch (e) {
message.nothirdparty = true;
}
postMessage(message);
})();
</script>