Take the 2-minute tour ×

One requirement for a site I'm working on calls for visitors to be able to sign up for an email list. Rather than add server-side handling for this otherwise static site, I would like to POST from the email signup form to another server (owned by the same client) that already has an email signup handler on it.

But that server is on a different domain, so I expect some resistance from UA CSRF protections, but I don't know exactly what to expect. (There is practically no JS involved with this, just cross-site POSTing.)

  1. Is what I want to do possible at all, or do I need to iframe the email signup form from server #2?
  2. If it is possible, what kind of problems can I expect to face, and how should I overcome them?
share|improve this question
PS – CSRF doesn't seem to be a tag, and I don't have the cred to add it. XSS is related, so I used that, but it's not the tag I really would've chosen. –  kojiro Sep 20 '11 at 16:05

1 Answer 1

up vote 2 down vote accepted

Just tried this out, and yes, it completely works:


Source code for sender:

        <form method="POST" action="http://www.automatumvitae.com/testPostReceiver.php">
            <input type="text" name="text" />
            <input type="submit" />

Source code for receiver:

            if (isset($_POST['text'])) {
                $text = $_POST['text'];
                echo "Succeded! Submitted value: $text";
            } else {
                echo "Didn't receive anything. :(";

As a side note, this has been tried on two different domains under the same server. It is a cross domain post but they both point to the same IP. (I don't think it should affect anything, though.)

I tried this out on FF and Chrome and haven't found a single issue.

share|improve this answer

Your Answer


