moose-en-a-gant Posted February 18, 2015 Share Posted February 18, 2015 Sort of being lazy, I wanted to just embed the main inteface of my website in a small window, rather than rescaling it. So if I did <iframe src="mysite.com" width="auto" height='auto"> am I vulnerable for an attack eg. someone replacing the src with a different location. ? Quote Link to comment https://forums.phpfreaks.com/topic/294690-can-iframe-sources-be-hijacked/ Share on other sites More sharing options...
QuickOldCar Posted February 18, 2015 Share Posted February 18, 2015 Usually iframes are safe if is your own content and the content being iframed has no security flaws in it. If you want to prevent clickjacking you can use X-Frame-Options response header When you iframe you lose a lot of control what you can do with it. You are just adding a "window" of it. You can resize the frame but not the content within. I would break the script up and include() it both places. Another method would be to use file_get_contents() Output buffering can be used to capture and store the data in the internal buffer and output it any way you want. ob_start() ob_get_clean() ob_end_clean() 1 Quote Link to comment https://forums.phpfreaks.com/topic/294690-can-iframe-sources-be-hijacked/#findComment-1505980 Share on other sites More sharing options...
NetKongen Posted March 3, 2015 Share Posted March 3, 2015 No that should be fine to do. An if the hacker is able to do what you describe we would probably just hack you mysite.com instead ;-) Quote Link to comment https://forums.phpfreaks.com/topic/294690-can-iframe-sources-be-hijacked/#findComment-1507393 Share on other sites More sharing options...
moose-en-a-gant Posted March 5, 2015 Author Share Posted March 5, 2015 Well take adblock for example, I'm not sure how they work, I would like to think that they read the source and find code that matches advertisments like the format for google adsense and somehow re-write them like for example using jQuery setting display: to none; but I don't know if that is possible. Quote Link to comment https://forums.phpfreaks.com/topic/294690-can-iframe-sources-be-hijacked/#findComment-1507597 Share on other sites More sharing options...
jeffreyappel Posted March 15, 2015 Share Posted March 15, 2015 i suggest make the iFrame invisible to make harder for clickjacker. Quote Link to comment https://forums.phpfreaks.com/topic/294690-can-iframe-sources-be-hijacked/#findComment-1508155 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.