Blocking Another Site Inserting My Site Via iFrame

**DaftDog** · 17 June 2015, 2:51 am

I discovered another website that was inserting my website into pages on their site using iframes. I Googled a solution that re-directs any such page to my actual website.

Now I am just a bit concerned of the SEO ramifications, if any, of doing this. Will these new re-directed links pass on any good or bad SEO signals to my website?

**dfiocch** · 17 June 2015, 3:00 am

You're exposed to "clickjacking". It means that someone can generate a script to completely "destroy" you click stats (including bounce rate, time on site and many other sh*ts that G count on quality sites). Or, they can use your own layout to rank other sites... or... or... or... definitively not good.

If you want to block other sites inserting your own site in their pages using iframes, you could add this to your .htaccess file:

Code:

Header set X-Frame-Options SAMEORIGIN

This block the "iframing" of your site but you can still use iframes on your own properties.
I wouldn't do redirects from "scumbag-site" to my site: the site A maybe compromised/poisoned/penguinized/pandaliez/malwarized and as we all know, 301 redirects pass a lot of good things but also a lot of sh*ts.

**DaftDog** · 17 June 2015, 3:37 am

Originally Posted by dfiocch

You're exposed to "clickjacking". It means that someone can generate a script to completely "destroy" you click stats (including bounce rate, time on site and many other sh*ts that G count on quality sites). Or, they can use your own layout to rank other sites... or... or... or... definitively not good.

If you want to block other sites inserting your own site in their pages using iframes, you could add this to your .htaccess file:

Code:

Header set X-Frame-Options SAMEORIGIN

This block the "iframing" of your site but you can still use iframes on your own properties.
I wouldn't do redirects from "scumbag-site" to my site: the site A maybe compromised/poisoned/penguinized/pandaliez/malwarized and as we all know, 301 redirects pass a lot of good things but also a lot of sh*ts.

Thanks a stack for the info. Just implemented the code in my .htaccess file and it is working as you mentioned.

**dfiocch** · 17 June 2015, 4:57 am

You're welcome

**slotplayer** · 17 June 2015, 11:39 am

thanks, I was looking for something like this.

**slotplayer** · 17 June 2015, 11:43 am

curb shop and 5ver are two that like to iframe another sites' content.

**vardan** · 17 June 2015, 3:42 pm

Thanks for the code: it's better to prevent risks, than fix them later

**sweetbet** · 17 June 2015, 4:44 pm

I usually add a break-out-of-frames script to all my pages, but this is much better.

**universal4** · 18 June 2015, 11:05 pm

Yes I agree this is excellent information.

Rick
Universal4

**DaftDog** · 21 September 2018, 6:11 am

Sorry but I do have a reason for resurrecting this old thread.

I gave the code mentioned in this thread to a friend whose site was having the same issue I initially experienced. They just emailed me to say that they were hacked within 5 minutes of inserting this code into their htaccess file. Has anybody else had a similar issue? I personally don't believe the code is the issue as I have used it since dfiocch provided it to me here in this thread.

Code:

Header set X-Frame-Options SAMEORIGIN

**Progger** · 21 September 2018, 6:39 am

Originally Posted by DaftDog

Sorry but I do have a reason for resurrecting this old thread.

I gave the code mentioned in this thread to a friend whose site was having the same issue I initially experienced. They just emailed me to say that they were hacked within 5 minutes of inserting this code into their htaccess file. Has anybody else had a similar issue? I personally don't believe the code is the issue as I have used it since dfiocch provided it to me here in this thread.

Code:

Header set X-Frame-Options SAMEORIGIN

This code is not the reason...100% not.

**IWcasino** · 22 September 2018, 10:23 am

Originally Posted by DaftDog

Sorry but I do have a reason for resurrecting this old thread.

I gave the code mentioned in this thread to a friend whose site was having the same issue I initially experienced. They just emailed me to say that they were hacked within 5 minutes of inserting this code into their htaccess file. Has anybody else had a similar issue? I personally don't believe the code is the issue as I have used it since dfiocch provided it to me here in this thread.

Code:

Header set X-Frame-Options SAMEORIGIN

Hacked within 5 minutes or discovered within 5 minutes they’d been hacked at some unknown point?

**dfiocch** · 22 September 2018, 10:44 am

It's not the code. Impossible.
Ask them to check for plugin vulnerabilities (if they are using WP or Joomla).

**buyonaut** · 23 September 2018, 5:21 am

The best way to fix this other than above script is to file a DMCA complaint. It worked for me, however the site/domain that was hijacked was destroyed ie intoxicated by the hijacker very badly. Google is stupid enough to not differ original content from the jacked one, and my site never recovered from that.
That was a long time ago, maybe damage is not so bad nowdays. Good luck

Thread: Blocking Another Site Inserting My Site Via iFrame

LinkBack

Thread Tools

Search Thread

Display

Blocking Another Site Inserting My Site Via iFrame

The Following 5 Users Say Thank You to dfiocch For This Useful Post:

The Following 2 Users Say Thank You to DaftDog For This Useful Post:

The Following User Says Thank You to slotplayer For This Useful Post:

The Following User Says Thank You to vardan For This Useful Post:

The Following User Says Thank You to sweetbet For This Useful Post:

The Following User Says Thank You to universal4 For This Useful Post:

The Following User Says Thank You to DaftDog For This Useful Post:

The Following User Says Thank You to Progger For This Useful Post:

The Following 2 Users Say Thank You to dfiocch For This Useful Post:

Posting Permissions