Pull data from website to wordpress site (query string?)

  • Hi we have a WordPress installation – our parent company has a custom built website, these websites don’t share the same network – completely separate in every way.

    We’re looking to pull data (customer name, address etc) from a page set up on their site through our site…. wondering if this is possible with WordPress?

    The journey would be:

    1)Customer enters information on parent company
    2)Clicks link sending them to our WordPress site
    3)Customer sees page on our site and applies for more info by submitting contact form prefilled with the information from the other website.

    Any ideas?

    Thank you

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter GEPS

    (@geps)

    Anyone any ideas on this?

    Such cross-site scripting could be exploited by a malicious third-party.

    It would be safer to create a page on your WordPress site and to embed that page in an iFrame on your parent company site. The visitor would see the entire WordPress page (masthead, menu, etc.) in the iFrame.

    You might want to hire a developer to write a plugin for you that has some security to prevent or minimize potential exploitation of cross-site scripting if you really just need to embed a lead gen form on the parent site.

    I don’t think that’s a good idea.

    Thread Starter GEPS

    (@geps)

    Thank you for the feedback.

    Would it not help if we add SSL protection to the site?

    It’s only for sending name/address information to our page

    Thank you for your assistance

    SSL would only protect the packets between the users and the server, or between server and server. Cross-site scripting issues are something else altogether. I don’t know if they could be exploited but I think you would be inviting trouble if a rogue crawler found an opportunity. If nothing else they would hammer the xmlrpc.php script from all sorts of machines, trying to figure out how to use it (they’ll do that anyway, but making the script responsive to an off-site form increases the risk).

    Why not just have the parent company Website email the information to a company-internal POP email account?

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Pull data from website to wordpress site (query string?)’ is closed to new replies.