Cross-domain AJAX Vkontakte?

Question

PHP

Hello.

There was a problem with adapting a simple iframe of the Vkontakte game for IE8+, namely with ajax requests.
The application is loaded via IFRAME from the site sub.domain.ru/game.php. AJAX requests are sent from a script (JavaScript) using jQuery to sub.domain.ru/api.php. In Chrome/FF/Safari/Opera everything works without problems. In IE8/9, Ajax requests simply don't work or get blocked (no response).

Code for sending requests:

$.ajax({
type: "POST",
async: isAsync,
url: URL,
data: params,
success: function(answer) {
....
}
});

Added headers for cross-domain requests in PHP:

header('Content-Type: text/html; charset=utf-8');
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: POST, GET');

Enabled CORS in JavaScript:

$.support.cors = true;

Answer 1

Probably because older IEs use XDomainRequest .
There is also written about the solution .

Answer 2

The problem turned out to be completely different and it is related to cookies... Cookies are set for the user during "authorization" and for all ajax requests of the user, the server checks these cookies to understand that this is the "correct" user:
setcookie("uid", $uid, time()+3600*24, '/');
.....
For some reason, cookies are not set in IE - probably this is due to IFRAMEs... The PHP script sets cookies from the sub.domain.ru/game.php domain, and then they are sent along with the request to sub.domain.ru/api.php where they are checked.

Answer 3

stackoverflow.com/questions/3362474/jquery-ajax-fa...

Answer 4

Where did you see a cross-domain request here?
Does the script from sub.domain.ru/game.php send Ajax to sub.domain.ru/api.php? If yes, then this is not a cross-domain
The problem is in scripts that are not friendly with IE