search
HomeBackend DevelopmentPHP TutorialIntroduction to mutual communication between php main and iframe

这篇文章主要介绍了php main 与 iframe 相互通讯类(js+php同域/跨域),需要的朋友可以参考下

main 与 iframe 相互通讯类

之前写过一篇《iframe与主框架跨域相互访问方法》,介绍了main与iframe相互通讯的原理,不了解原理的可以先看看。

今天把main与iframe相互通讯的方法封装成类,主要有两个文件,

JS:FrameMessage.js 实现调用方法的接口,如跨域则创建临时iframe,调用同域执行者。
PHP:FrameMessage.class.php 实现接收到跨域请求时,根据参数返回执行方法的JS code。

功能如下:

1.支持同域与跨域通讯
2.传递的方法参数支持字符串,JSON,数组等。

复制代码 代码如下:


FrameMessage.exec('http://127.0.0.1/execB.php', 'myframe', 'fIframe', ['fdipzone', '{"gender":"male","age":"29"}', '["http://blog.csdn.net/fdipzone", "http://weibo.com/fdipzone"]']); 

复制代码 代码如下:


FrameMessage.exec('http://localhost/execA.php', '', 'fMain', ['programmer', '{"first":"PHP","second":"javascript"}', '["EEG","NMG"]']);

因部分浏览器不支持JSON.stringify 与JSON.parse 方法(如IE6/7),为了兼容,需要包含json2.js,下载地址:

https://github.com/douglascrockford/JSON-js

FrameMessage.js


/** Main 与 Iframe 相互通讯类 支持同域与跨域通讯
*	Date:  2013-12-29
*  Author: fdipzone
*  Ver:  1.0
*/
var FrameMessage = (function(){

  this.oFrameMessageExec = null; // 临时iframe

  /* 执行方法
  executor 执行的页面,为空则为同域
  frame  要调用的方法的框架名称,为空则为parent
  func   要调用的方法名
  args   要调用的方法的参数,必须为数组[arg1, arg2, arg3, argn...],方便apply调用
       元素为字符串格式,请不要使用html,考虑注入安全的问题会过滤
  */
  this.exec = function(executor, frame, func, args){

    this.executor = typeof(executor)!='undefined'? executor : '';
    this.frame = typeof(frame)!='undefined'? frame : '';
    this.func = typeof(func)!='undefined'? func : '';
    this.args = typeof(args)!='undefined'? (__fIsArray(args)? args : []) : []; // 必须是数组

    if(executor==''){
      __fSameDomainExec(); // same domain
    }else{
      __fCrossDomainExec(); // cross domain
    }

  }

  /* 同域执行 */
  function __fSameDomainExec(){
    if(this.frame==''){ // parent
      parent.window[this.func].apply(this, this.args);
    }else{
      window.frames[this.frame][this.func].apply(this, this.args);
    }
  }

  /* 跨域执行 */
  function __fCrossDomainExec(){
    if(this.oFrameMessageExec == null){
      this.oFrameMessageExec = document.createElement('iframe');
      this.oFrameMessageExec.name = 'FrameMessage_tmp_frame';
      this.oFrameMessageExec.src = __fGetSrc();
      this.oFrameMessageExec.style.display = 'none';
      document.body.appendChild(this.oFrameMessageExec);
    }else{
      this.oFrameMessageExec.src = __fGetSrc();
    }
  }

  /* 获取执行的url */
  function __fGetSrc(){
    return this.executor + (this.executor.indexOf('?')==-1? '?' : '&') + 'frame=' + this.frame + '&func=' + this.func + '&args=' + JSON.stringify(this.args) + '&framemessage_rand=' + Math.random();
  }

  /* 判断是否数组 */
  function __fIsArray(obj){
    return Object.prototype.toString.call(obj) === '[object Array]';
  }

  return this;

}());

FrameMessage.class.php


<?php
/** Frame Message class main 与 iframe 相互通讯类
*  Date:  2013-12-29
*  Author: fdipzone
*  Ver:  1.0
*
*  Func:
*  public execute 根据参数调用方法
*  private returnJs 创建返回的javascript
*  private jsFormat 转义参数
*/

class FrameMessage{ // class start

  /* execute 根据参数调用方法
  * @param String $frame 要调用的方法的框架名称,为空则为parent
  * @param String $func 要调用的方法名
  * @param JSONstr $args 要调用的方法的参数
  * @return String
  */
  public static function execute($frame, $func, $args=&#39;&#39;){

    if(!is_string($frame) || !is_string($func) || !is_string($args)){
      return &#39;&#39;;
    }

    // frame 与 func 限制只能是字母数字下划线
    if(($frame!=&#39;&#39; && !preg_match(&#39;/^[A-Za-z0-9_]+$/&#39;,$frame)) || !preg_match(&#39;/^[A-Za-z0-9_]+$/&#39;,$func)){
      return &#39;&#39;;
    }

    $params_str = &#39;&#39;;

    if($args){
      $params = json_decode($args, true);
      
      if(is_array($params)){

        for($i=0,$len=count($params); $i<$len; $i++){ // 过滤参数,防止注入
          $params[$i] = self::jsFormat($params[$i]);
        }
        
        $params_str = "&#39;".implode("&#39;,&#39;", $params)."&#39;";
      }
    }

    if($frame==&#39;&#39;){ // parent
      return self::returnJs("parent.parent.".$func."(".$params_str.");");
    }else{
      return self::returnJs("parent.window.".$frame.".".$func."(".$params_str.");");
    }

  }


  /** 创建返回的javascript
  * @param String $str
  * @return String 
  */
  private static function returnJs($str){

    $ret = &#39;<script type="text/javascript">&#39;."\r\n";
    $ret .= $str."\r\n";
    $ret .= &#39;</script>&#39;;

    return $ret;
  }


  /** 转义参数
  * @param String $str
  * @return String
  */
  private static function jsFormat($str){

    $str = strip_tags(trim($str)); // 过滤html
    $str = str_replace(&#39;\\s\\s&#39;, &#39;\\s&#39;, $str);
    $str = str_replace(chr(10), &#39;&#39;, $str);
    $str = str_replace(chr(13), &#39;&#39;, $str);
    $str = str_replace(&#39; &#39;, &#39;&#39;, $str);
    $str = str_replace(&#39;\\&#39;, &#39;\\\\&#39;, $str);
    $str = str_replace(&#39;"&#39;, &#39;\\"&#39;, $str);
    $str = str_replace(&#39;\\\&#39;&#39;, &#39;\\\\\&#39;&#39;, $str);
    $str = str_replace("&#39;", "\&#39;", $str);

    return $str;
  }

} // class end

?>

A.html


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
 <head>
 <meta http-equiv="content-type" content="text/html; charset=utf-8">
 <title> main window </title>
 <script type="text/javascript" src="json2.js"></script>
 <script type="text/javascript" src="FrameMessage.js"></script>

 <script type="text/javascript">

 // main js function
 function fMain(profession, skill, company){

	var skill_p = JSON.parse(skill);
	var company_p = JSON.parse(company);
	
	var msg = "main function execute success\n\n";
	msg += "profession:" + profession + "\n";
	msg += "first skill:" + skill_p.first + "\n";
	msg += "second skill:" + skill_p.second + "\n";
	msg += "company1:" + company_p[0] + "\n";
	msg += "company2:" + company_p[1] + "\n";

	alert(msg);

 }

 // exec iframe function
 function exec_iframe(){
	// same domain
	//FrameMessage.exec(&#39;&#39;, &#39;myframe&#39;, &#39;fIframe&#39;, [&#39;fdipzone&#39;, &#39;{"gender":"male","age":"29"}&#39;, &#39;["http://blog.csdn.net/fdipzone", "http://weibo.com/fdipzone"]&#39;]);

	// cross domain
	FrameMessage.exec(&#39;http://127.0.0.1/execB.php&#39;, &#39;myframe&#39;, &#39;fIframe&#39;, [&#39;fdipzone&#39;, &#39;{"gender":"male","age":"29"}&#39;, &#39;["http://blog.csdn.net/fdipzone", "http://weibo.com/fdipzone"]&#39;]);
 }
 </script>

 </head>

 <body>
 <p>A.html main</p>
 <p><input type="button" value="exec iframe function" onclick="exec_iframe()"></p>
 <!-- same domain -->
 <!--<iframe src="B.html" name="myframe" width="500" height="100"></iframe>-->
 <!-- cross domain -->
 <iframe src="http://127.0.0.1/B.html" name="myframe" width="500" height="100"></iframe>
 </body>
</html>

B.html


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
 <head>
 <meta http-equiv="content-type" content="text/html; charset=utf-8">
 <title> iframe window </title>
 <script type="text/javascript" src="json2.js"></script>
 <script type="text/javascript" src="FrameMessage.js"></script>

 <script type="text/javascript">

 // iframe js function 
 function fIframe(name, obj, arr){
	
	var obj_p = JSON.parse(obj);
	var arr_p = JSON.parse(arr);
	
	var msg = "iframe function execute success\n\n";
	msg += "name:" + name + "\n";
	msg += "gender:" + obj_p.gender + "\n";
	msg += "age:" + obj_p.age + "\n";
	msg += "blog:" + arr_p[0] + "\n";
	msg += "weibo:" + arr_p[1] + "\n";

	alert(msg);

 }

 // exec main function
 function exec_main(){
	// same domain
	//FrameMessage.exec(&#39;&#39;, &#39;&#39;, &#39;fMain&#39;, [&#39;programmer&#39;, &#39;{"first":"PHP","second":"javascript"}&#39;, &#39;["EEG","NMG"]&#39;]);

	// cross domain
	FrameMessage.exec(&#39;http://localhost/execA.php&#39;, &#39;&#39;, &#39;fMain&#39;, [&#39;programmer&#39;, &#39;{"first":"PHP","second":"javascript"}&#39;, &#39;["EEG","NMG"]&#39;]); 
 }
 </script>

 </head>

 <body>
 <p>B.html iframe</p>
 <p><input type="button" value="exec main function" onclick="exec_main()"></p>
 </body>
</html>

execA.php 与 execB.php


<?php
require &#39;FrameMessage.class.php&#39;;

$frame = isset($_GET[&#39;frame&#39;])? $_GET[&#39;frame&#39;] : &#39;&#39;;
$func = isset($_GET[&#39;func&#39;])? $_GET[&#39;func&#39;] : &#39;&#39;;
$args = isset($_GET[&#39;args&#39;])? $_GET[&#39;args&#39;] : &#39;&#39;;

$result = FrameMessage::execute($frame, $func, $args);

echo $result;
?>

The above is the detailed content of Introduction to mutual communication between php main and iframe. For more information, please follow other related articles on the PHP Chinese website!

Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
PHP Dependency Injection Container: A Quick StartPHP Dependency Injection Container: A Quick StartMay 13, 2025 am 12:11 AM

APHPDependencyInjectionContainerisatoolthatmanagesclassdependencies,enhancingcodemodularity,testability,andmaintainability.Itactsasacentralhubforcreatingandinjectingdependencies,thusreducingtightcouplingandeasingunittesting.

Dependency Injection vs. Service Locator in PHPDependency Injection vs. Service Locator in PHPMay 13, 2025 am 12:10 AM

Select DependencyInjection (DI) for large applications, ServiceLocator is suitable for small projects or prototypes. 1) DI improves the testability and modularity of the code through constructor injection. 2) ServiceLocator obtains services through center registration, which is convenient but may lead to an increase in code coupling.

PHP performance optimization strategies.PHP performance optimization strategies.May 13, 2025 am 12:06 AM

PHPapplicationscanbeoptimizedforspeedandefficiencyby:1)enablingopcacheinphp.ini,2)usingpreparedstatementswithPDOfordatabasequeries,3)replacingloopswitharray_filterandarray_mapfordataprocessing,4)configuringNginxasareverseproxy,5)implementingcachingwi

PHP Email Validation: Ensuring Emails Are Sent CorrectlyPHP Email Validation: Ensuring Emails Are Sent CorrectlyMay 13, 2025 am 12:06 AM

PHPemailvalidationinvolvesthreesteps:1)Formatvalidationusingregularexpressionstochecktheemailformat;2)DNSvalidationtoensurethedomainhasavalidMXrecord;3)SMTPvalidation,themostthoroughmethod,whichchecksifthemailboxexistsbyconnectingtotheSMTPserver.Impl

How to make PHP applications fasterHow to make PHP applications fasterMay 12, 2025 am 12:12 AM

TomakePHPapplicationsfaster,followthesesteps:1)UseOpcodeCachinglikeOPcachetostoreprecompiledscriptbytecode.2)MinimizeDatabaseQueriesbyusingquerycachingandefficientindexing.3)LeveragePHP7 Featuresforbettercodeefficiency.4)ImplementCachingStrategiessuc

PHP Performance Optimization Checklist: Improve Speed NowPHP Performance Optimization Checklist: Improve Speed NowMay 12, 2025 am 12:07 AM

ToimprovePHPapplicationspeed,followthesesteps:1)EnableopcodecachingwithAPCutoreducescriptexecutiontime.2)ImplementdatabasequerycachingusingPDOtominimizedatabasehits.3)UseHTTP/2tomultiplexrequestsandreduceconnectionoverhead.4)Limitsessionusagebyclosin

PHP Dependency Injection: Improve Code TestabilityPHP Dependency Injection: Improve Code TestabilityMay 12, 2025 am 12:03 AM

Dependency injection (DI) significantly improves the testability of PHP code by explicitly transitive dependencies. 1) DI decoupling classes and specific implementations make testing and maintenance more flexible. 2) Among the three types, the constructor injects explicit expression dependencies to keep the state consistent. 3) Use DI containers to manage complex dependencies to improve code quality and development efficiency.

PHP Performance Optimization: Database Query OptimizationPHP Performance Optimization: Database Query OptimizationMay 12, 2025 am 12:02 AM

DatabasequeryoptimizationinPHPinvolvesseveralstrategiestoenhanceperformance.1)Selectonlynecessarycolumnstoreducedatatransfer.2)Useindexingtospeedupdataretrieval.3)Implementquerycachingtostoreresultsoffrequentqueries.4)Utilizepreparedstatementsforeffi

See all articles

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

SublimeText3 English version

SublimeText3 English version

Recommended: Win version, supports code prompts!

SecLists

SecLists

SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)