33994Article: Tuning AJAXhttp://www.xml.com/pub/a/2005/11/30/tuning-ajax-performance.htmlUnless you live under a rock, you've heard about and likely even used AJAX. Asynchronous JavaScript and XML is becoming an increasingly pervasive deployment methodology, which necessitates that people start to both understand how it works and actually consider it more seriously as an enterprise-level development tool.Ajax > Tips and TutorialsNov 11, 2006O'Reilly Media, Inc.
When an HTML page is used in conjunction with JavaScript technology, this page can contact the server which loaded it and request content. This content may be altered in the form of XML documents, as well regular text, HTML, or JSON. The JavaScript system can then take this content and alter the Document Object Model within the HTML page. Ajax is used as a broad term to describe this interactive model. However, it should be emphasized that Ajax is not entirely new. The underlying technology for Ajax has been available for a number of years.
However, the proliferation of this technology has been hampered by a number of technical barriers. The biggest barrier that Ajax developers faced was the lack of an advanced remote scripting system. To deal with these problems, developers were forced to use Java applets, plug-ins, and frames which were hidden from the eyes of the user. While these tools did create a certain level of interactivity on the web, the system still was heavily limited in its true capabilities.
Ajax is actually a family of technologies that have been available for years. The means to make requests to the server using only JavaScript were built into Internet Explorer 5.5, but the possibilities of the technology were overlooked. It was only in 2005 that the techniques were rediscovered and used, notably to excellent effect in Google?s ? GMail web application.
If you're even remotely connected to web development, you can't have failed to have heard of Ajax at some point in the last year. It probably sounded like the latest buzzword and was one of those things you stuck on the "must read up on later" pile. While it's definitely a buzzword, it's also quite a useful one.
Cross Site Script or XSS is one of the popular methods for attacking not only to Ajax based websites but almost any other website that accepts user inputs. Even before Ajax was conceptualized, this attack was already practiced by different hackers. There was one hack that was used in 2005 wherein MySpace.com was targeted. It uses a simple JavaScript function that could be embedded in user’s website and others. Once they view the webpage, the “My Hero” link is changed to the name of the hacker. It is practically a pyramid hack since anyone who sees the profile became the host of the hack. The code was actually posted by the builder of the hack in possible reparation for what he did. It is just a simple JavaScript that could be embedded in any website. It just does not hack any information, it practically takes over every function it wants to.
In our last article, we touched the surface of Ajax by developing a simple email validation application. In this article we are going to delve deeper into Ajax and explore how XSL can be used on both the client side (using Javascript) and on the server (using PHP) to transform XML data into XHTML
Joining mailing list will entitle you
to receive occasional emails informing you of news and
updates to the site and any special offers that may be
of interest to you.