JSONP
Modern applications normally use fetch() with CORS instead.
JSONP is a Legacy Technique.
Modern applications normally use fetch() with CORS instead.
JSONP executes returned data as JavaScript and should only be used with trusted servers.
JSONP Intro
JSONP is a method for sending JSON data without worrying about cross-domain issues.
JSONP does not use the XMLHttpRequest object.
JSONP uses the tag instead.
Requesting a file from another domain can cause problems, due to cross-domain policy.
Requesting an external script from another domain does not have this problem.
JSONP uses this advantage, and request files using the script tag instead of the XMLHttpRequest object.
Example
Example Code
htmlThe Server File
The file on the server wraps the result inside a function call:
Example
Example Code
htmlThe result returns a call to a function named "myFunc" with the JSON data as a parameter.
Make sure that the function exists on the client.
The JavaScript function
The function named "myFunc" is located on the client, and ready to handle JSON data:
Example
Example Code
javascriptfunction myFunc(myObj)
{
document.getElementById("demo").innerHTML =
myObj.name;
}Creating a Dynamic Script Tag
The example above will execute the "myFunc" function when the page is loading, based on where you put the script tag, which is not very satisfying.
The script tag should only be created when needed:
Example
Example Code
javascriptfunction clickButton() {
let s = document.createElement("script");
s.src = "demo_jsonp.php";
document.body.appendChild(s);
}Dynamic JSONP Result
The examples above are still very static.
Make the example dynamic by sending JSON to the php file, and let the php file return a JSON object based on the information it gets.
PHP file
Example Code
htmlquery("SELECT name FROM
".$obj->$table." LIMIT ".$obj->$limit);
$outp = array();
$outp = $result->fetch_all(MYSQLI_ASSOC);
echo "myFunc(".json_encode($outp).")";
?>PHP File explained:
- Convert the request into an object, using the PHP function json_decode().
- Access the database, and fill an array with the requested data.
- Add the array to an object.
- Convert the array into JSON using the json_encode() function.
- Wrap "myFunc()" around the return object.
JavaScript Example
Example Code
javascriptconst obj = { table: "products", limit: 10 };
let s = document.createElement("script");
s.src = "jsonp_demo_db.php?x=" + JSON.stringify(obj);
document.body.appendChild(s);
function myFunc(myObj) {
let txt = "";
for (let x in myObj)
{
txt += myObj[x].name + " ";
}
document.getElementById("demo").innerHTML = txt;
}Callback Function
When you have no control over the server file, how do you get the server file to call the correct function?
Sometimes the server file offers a callback function as a parameter:
Example
Example Code
javascriptlet s = document.createElement("script");
s.src = "jsonp_demo_db.php?callback=myDisplayFunction";
document.body.appendChild(s);Interactive Code Examples
Example 1
html<script src="demo_jsonp.php">JS Example 2
html<?php
$myJSON = '{ "name":"John", "age":30, "city":"New York" }';
echo "myFunc(".$myJSON.");";
?>JS Example 3
javascriptJS Example 4
javascriptfunction clickButton() {
let s = document.createElement("script");
s.src = "demo_jsonp.php";
document.body.appendChild(s);
}PHP file
html<?php
header("Content-Type: application/json; charset=UTF-8");
$obj =
json_decode($_GET["x"], false);
$conn = new mysqli("myServer", "myUser", "myPassword", "Northwind");
$result = $conn->query("SELECT name FROM
".$obj->$table." LIMIT ".$obj->$limit);
$outp = array();
$outp = $result->fetch_all(MYSQLI_ASSOC);
echo "myFunc(".json_encode($outp).")";
?>