JavaScript/HTML - Container

Re: Example: PHP show friends page

Mehedi Hasan — Wed, 11 Mar 2009 03:12:46 GMT

Hi I found this tutorial is not working for me. wht should I do? Please help me

Re: Example: PHP show friends page

Thomas — Sat, 10 Jan 2009 01:32:29 GMT

Daniel:

<?php
$user = $_GET["id"];
require_once('Space.php');
$key = 'XXXXXXXXXXXXXXXXXXXXXXXX';
$secret = 'XXXXXXXXXXXXXXXXXXXXXXXXX';
$s = new Space($key,$secret);
$hProfile = $s->profile($user);
foreach($hProfile as $k => $value){
echo "<BR><strong>".$k."</strong>:".$value;
}

Wow! This is so insecure... All this requires is someone to know the myspaceid of another user of your app, and placing it on the end of your apps url http://someurl.com?id=xxxxxxxx and bang! They are authenticated into your app.

Re: Example: PHP show friends page

Chad Russell — Thu, 08 Jan 2009 21:41:51 GMT

The alert function is blocked, try outputting something to a div, e.g.:

document.getElementById("output").innerHTML = "hello world";

</script>

Re: Example: PHP show friends page

JackTard — Sun, 04 Jan 2009 21:34:01 GMT

App Source worked, now it doesn't. What did I do... ??

I had the MySpace App source listed here, with the JavaScript working. now it seems I can't get something as simple as a js Alert(); function to display consistantly. It does seem it will work Off and On, but I don't know what I'm doing at this point.

Here's what I'm doing, from this page http://developer.myspace.com/Apps.mvc, I click "Edit Source." Under the "Canvas Surface" I put in something as simple as,

Click the "Save Application Souce" and click the "View Development Version" but no luck! I see no alert. If I do something as simple as an <iframe src=""> to pull up an external page it works fine. What am I doing wrong here?? Your help would be greatly appreciated.

Re: Example: PHP show friends page

JackTard — Fri, 02 Jan 2009 11:58:08 GMT

finally!

Thanks, you get one of the two spots in my big credit thanks! you're awesome!!!

Re: Example: PHP show friends page

Jeremy — Sun, 30 Mar 2008 09:46:30 GMT

Whoops. That's what I get for not actually reading through the code.

In that case you're absolutely right - no checking is done. That code is nice, but to be honest, it's not the best way to handle this situation. Two alternatives would be use an External IFrame-type canvas, which does the appending automatically (and does it at the relay, where it's signed, so there's no way to fake an Id) or to use an HTML-response makeRequest instead of an IFrame. The PHP file will return an HTML page, and you'd just dump that response into the innerHTML of a div. If you sign the makeRequest, it'll have the owner and viewer ids appended automatically - you can't hack them in through the javascript. To prevent a spoof to your sever, you can also sign the request and check OAuth at your end.

The method above, like I said, is workable, but it doesn't implement any security features. Sorry about saying that.

Re: Example: PHP show friends page

Daniiiiiel™ — Sun, 30 Mar 2008 02:09:43 GMT

Jeremy:

And to the second question -- because the Ids are included in the basestring when the Signature is created, for someone to change them, they'd have to be able to produce a valid oauth_signature with the new values. To do that they'd need your App's security key.

I think he meant this line:

 document.getElementById('frame').src = "http://XXXXXXX/file.php?id="+ viewerName;

What's to stop someone going to eg. file.php?id=[some user with a private profile that has the app installed] to view a private user's friends list? Or is there something I'm missing, some checking done?

Re: Example: PHP show friends page

Simone — Thu, 27 Mar 2008 18:51:19 GMT

Daniel:
function dataLoadCallback(dataResponse) {

if (dataResponse.hadError()) {

    alert(“Error”);

} else {

    var viewerData = dataResponse.get(opensocial.DataRequest.PersonId.VIEWER).getData();

    var viewerName = viewerData.getField(opensocial.Person.Field.ID);

    document.getElementById('frame').src = "http://XXXXXXX/file.php?id="+ viewerName;

}

}

Daniel,

Thanks for the share agaiain , but I'm facing problem with this everytime I paste this code on my Canvas source it Either shows error as follows:

1.Your source contains errors. Please correct and try again.

Type	Message	Line	Column
INVALID_IDENTIFIER		-1	-1

Or 2. Just Iframe tag is shown on the canvas page of the application.

Formerly, as far as I knw, It'd worked once for me:

my Application is ready at :

http://www.unique-group.org/MYSPACEAPPS/NICKNAMES/

There in application,I've provided the user_id param manually, but now what I want to do is pass user_id as something like /index.php?user_id=viewer_id .But it is not getting.I'm stuck here.Please help me with.

thx,

Re: Example: PHP show friends page

BlahBlah — Wed, 26 Mar 2008 16:58:10 GMT

Regarding the 20 friend limit, i seem to recall messing around with this a little while back. All u need is a couple more parameters when calling the friends function..

Instead of..

$hFriends = $s->friends($user);

use(where $friend_limit is your max number of friends u want returned)..

$hFriends = $s->friends($user,NULL,$friend_limit);

i seem to remember there was a bug in the space.php that i had to change to get this to work.. i dont know if the client library has been corrected yet or which bit i had to change, so ill copy the whole friends function...

public function friends($iUser,$page = null,$page_size = null,$list = null) {
    $sQuery = 'users/'.$iUser.'/friends';
    $hParams = array();
    if( $page !== null ) {
      $hParams['page'] = $page;
    }

    if( $page_size !== null ) {
      $hParams['page_size'] = $page_size;
    }

    if( $list !== null ) {
      $hParams['list'] = $list;
    }
    return $this->do_request($sQuery,$hParams);
}

hope this helps,

Paul

Re: Example: PHP show friends page

Jeremy — Fri, 14 Mar 2008 22:55:18 GMT

I don't know much about the internal workings of the PHP Client Library, but I think, as of right now, you can only grab 20 friends at a time with it. I imagine at some point someone will fix that and put the fixed version up.

And to the second question -- because the Ids are included in the basestring when the Signature is created, for someone to change them, they'd have to be able to produce a valid oauth_signature with the new values. To do that they'd need your App's security key.

Re: Example: PHP show friends page

Shopit — Fri, 14 Mar 2008 17:21:57 GMT

What about the security risk of passing in a user id which can be passed in by anyone. Do you do any kind of checking to verify that?

Re: Example: PHP show friends page

jon.who — Fri, 14 Mar 2008 03:17:22 GMT

This only shows the first 20 friends. How do I show all the friends?

Re: Example: PHP show friends page

J9 — Thu, 13 Mar 2008 20:35:49 GMT

Thanks for sharing!

Example: PHP show friends page

Daniel — Wed, 27 Feb 2008 19:14:22 GMT

So this is for all the Newbie out there.

I’m a Facebook app developer and only today I success on building my first PHP Open Social app.

I will share it with you so all the newbies will get a good start and the experts can comment my way and help me improve my knowledge on MySpace Open Social.

This example set an Iframe on the canvas, get the user ID using JS and load PHP page with the user ID (as parameter). In the PHP page I use the PHP Client Library (http://developer.myspace.com/Community/forums/t/157.aspx) to show the user parameters and his friends.

App Source:

<BR>

function init() {

MYOS_TRACE = true;

var os = opensocial.Container.get();

var dataReqObj = os.newDataRequest();

var viewerReq = os.newFetchPersonRequest(opensocial.DataRequest.PersonId.VIEWER);

dataReqObj.add(viewerReq);

dataReqObj.send(dataLoadCallback);

}

function dataLoadCallback(dataResponse) {

if (dataResponse.hadError()) {

alert(“Error”);

} else {

var viewerData = dataResponse.get(opensocial.DataRequest.PersonId.VIEWER).getData();

var viewerName = viewerData.getField(opensocial.Person.Field.ID);

document.getElementById('frame').src = "http://XXXXXXX/file.php?id="+ viewerName;

}

init();

</script>

The PHP page:

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
</head>
<body>
<?php
    $user = $_GET["id"];
require_once('Space.php');
$key = 'XXXXXXXXXXXXXXXXXXXXXXXX';
$secret = 'XXXXXXXXXXXXXXXXXXXXXXXXX';
$s = new Space($key,$secret);
$hProfile = $s->profile($user);
foreach($hProfile as $k => $value){
    echo "<BR><strong>".$k."</strong>:".$value;
}
echo "<hr>Friend list";
$hFriends = $s->friends($user);
foreach($hFriends["friends"] as $friend){
    echo "<BR><u>Frend</u>";
    foreach($friend as $k => $value){
        echo "<BR><strong>".$k."</strong>:".$value;
    }
}
?>
</body>
</html>

I’m not secure if Iframe is the best way and hopping to get comments from others.

Regards,

Daniel