Blocking Another Site Inserting My Site Via iFrame

I discovered another website that was inserting my website into pages on their site using iframes. I Googled a solution that re-directs any such page to my actual website.

Now I am just a bit concerned of the SEO ramifications, if any, of doing this. Will these new re-directed links pass on any good or bad SEO signals to my website?

You're exposed to "clickjacking". It means that someone can generate a script to completely "destroy" you click stats (including bounce rate, time on site and many other sh*ts that G count on quality sites). Or, they can use your own layout to rank other sites... or... or... or... definitively not good.

If you want to block other sites inserting your own site in their pages using iframes, you could add this to your .htaccess file:

Code:

---

Header set X-Frame-Options SAMEORIGIN

---

This block the "iframing" of your site but you can still use iframes on your own properties.
I wouldn't do redirects from "scumbag-site" to my site: the site A maybe compromised/poisoned/penguinized/pandaliez/malwarized and as we all know, 301 redirects pass a lot of good things but also a lot of sh*ts.

Quote:

---

Originally Posted by dfiocch

You're exposed to "clickjacking". It means that someone can generate a script to completely "destroy" you click stats (including bounce rate, time on site and many other sh*ts that G count on quality sites). Or, they can use your own layout to rank other sites... or... or... or... definitively not good.

If you want to block other sites inserting your own site in their pages using iframes, you could add this to your .htaccess file:

Code:

---

Header set X-Frame-Options SAMEORIGIN

---

This block the "iframing" of your site but you can still use iframes on your own properties.
I wouldn't do redirects from "scumbag-site" to my site: the site A maybe compromised/poisoned/penguinized/pandaliez/malwarized and as we all know, 301 redirects pass a lot of good things but also a lot of sh*ts.

---

Thanks a stack for the info. Just implemented the code in my .htaccess file and it is working as you mentioned. :)

You're welcome ;)

thanks, I was looking for something like this.

curb shop and 5ver are two that like to iframe another sites' content.

Thanks for the code: it's better to prevent risks, than fix them later :)

I usually add a break-out-of-frames script to all my pages, but this is much better.

Yes I agree this is excellent information.

Rick
Universal4

Sorry but I do have a reason for resurrecting this old thread.

I gave the code mentioned in this thread to a friend whose site was having the same issue I initially experienced. They just emailed me to say that they were hacked within 5 minutes of inserting this code into their htaccess file. Has anybody else had a similar issue? I personally don't believe the code is the issue as I have used it since dfiocch provided it to me here in this thread.

Code:

---

Header set X-Frame-Options SAMEORIGIN

---

Quote:

---

Originally Posted by DaftDog

Sorry but I do have a reason for resurrecting this old thread.

I gave the code mentioned in this thread to a friend whose site was having the same issue I initially experienced. They just emailed me to say that they were hacked within 5 minutes of inserting this code into their htaccess file. Has anybody else had a similar issue? I personally don't believe the code is the issue as I have used it since dfiocch provided it to me here in this thread.

Code:

---

Header set X-Frame-Options SAMEORIGIN

---

---

This code is not the reason...100% not.

Quote:

---

Originally Posted by DaftDog

Sorry but I do have a reason for resurrecting this old thread.

I gave the code mentioned in this thread to a friend whose site was having the same issue I initially experienced. They just emailed me to say that they were hacked within 5 minutes of inserting this code into their htaccess file. Has anybody else had a similar issue? I personally don't believe the code is the issue as I have used it since dfiocch provided it to me here in this thread.

Code:

---

Header set X-Frame-Options SAMEORIGIN

---

---

Hacked within 5 minutes or discovered within 5 minutes they’d been hacked at some unknown point?

It's not the code. Impossible.
Ask them to check for plugin vulnerabilities (if they are using WP or Joomla).

The best way to fix this other than above script is to file a DMCA complaint. It worked for me, however the site/domain that was hijacked was destroyed ie intoxicated by the hijacker very badly. Google is stupid enough to not differ original content from the jacked one, and my site never recovered from that.
That was a long time ago, maybe damage is not so bad nowdays. Good luck