PHP: Check if page is displayed inside iframe?

Question

I would like to use PHP to check if the page is being loaded in an iframe. Preferably, but not required, I would like to have the parent's url when applicable. Thank you.

Once php finishes executing it sends the output to apache and apache makes it available to your browser so once it gets rendered by your browser php is no longer "active", assuming you have control over the page that is using your page as an iframe you can add a parameter to the url indicating this is "iframed", that would help you take any decisions you would need on your php script — rroche
– rroche, Commented Sep 24, 2012 at 23:13

Ray · Accepted Answer · 2012-09-24 23:11:12Z

11

Php cannot tell the context for which the request is made. It doesn't know anything except what is passed to it and available as server variable. You could add your own get parameter to the url to be used when putting your page in an iframe, but otherwise you are out of luck.

answered Sep 24, 2012 at 23:11

Ray

41.6k22 gold badges110 silver badges144 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Mooseman Over a year ago

I will have to use a parameter in conjunction with JS for visibility of content. Thanks

Explosion Pills · Accepted Answer · 2012-09-24 23:15:33Z

5

JavaScript is required for this; there is absolutely no way for PHP to know dependably. In JavaScript you could use

window.top === window.self;

answered Sep 24, 2012 at 23:15

Explosion Pills

192k56 gold badges341 silver badges417 bronze badges

Comments

STA · Accepted Answer · 2021-08-11 10:07:10Z

1

Yes, In 2021 this is possible to check URL Embed on iframe or not with get_header PHP's function, I made this below function :

public function allowEmbed($url = 'https://stackoverflow.com/') {

        try {
            $headers = get_headers($url);
        } catch (\Exception $e) {
            $headers = [];
        }

        $blackList = [
            'x-frame-options: sameorigin',
            'x-frame-options: allow-from',
            'x-frame-options: deny',
        ];

        $headers = array_map('strtolower', $headers);

        $check = array_intersect($blackList, $headers);

        if(!$check) {
            return ['status' => 1, 'message' => 'Passed'];
        } else {
            return ['status' => 0, 'message' => 'Fail'];
        }   
}

edited Aug 11, 2021 at 10:07

answered Aug 11, 2021 at 9:18

STA

35.3k9 gold badges49 silver badges62 bronze badges

Comments

pelikanekcz · Accepted Answer · 2014-05-28 10:04:36Z

0

I think there is some possibility to detect iframe by PHP global variable $_SEVER["HTTP_REFERER"]. In this variable is a url of parent window.

answered May 28, 2014 at 10:04

pelikanekcz

21

4 Comments

Mooseman Over a year ago

It's not very reliable, even according to the docs.

prince Over a year ago

PHP is a web server and is involved only in the dynamic building of html code and delivery over a network. Details about ways the HTML is rendered in a browser are accessible via javascript.

Joseph Crawford Over a year ago

This will not work the referrer will always be your site that is in the iframe. I have tried this and the first page load worked fine but as soon as you click a link in the iframe the referer is now your site and not the site holding the iframe.

ajay Over a year ago

PHP is server side language. There is no way in PHP to detect iframe.

Collectives™ on Stack Overflow

PHP: Check if page is displayed inside iframe?

4 Answers 4

1 Comment

Comments

Comments

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

1 Comment

Comments

Comments

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related