unatuhorised embed of my site 1

[pease]

Hi,

One of the sites I run has been embedded into a third party via an iframe. I have tried contacting the party on a number of occasions but had no joy in getting it removed.

This is now harming our sites reputation and business, is there any way to deny the data if its being used in an iframe or on another site?

I cant however stop hotlinking as we have a number of images legally hotlinked on other sites.

Ive tried adding the IP address and domain name of the offending site to my IP Deny list but that doesnt seem to work.

Any help would be appreciated.

Peter

 

[feherke]

Hi

Ive tried adding the IP address and domain name of the offending site to my IP Deny list but that doesnt seem to work.

I guess you are trying to ban based on [tt]REMOTE_ADDR[/tt], but what you want should be done based on [tt]REFERER[/tt]. But this way you would ban legitimate visitors too.

I suggest to use a JavaScript code like this on every page :

if (top!=self) top.location=self.location

Feherke.

http://rootshell.be/~feherke/

 

[pease]

Thank you, thats exactly the sort of thing I was thinking of.

 

[BillyRayPreachersSon]

Unfortunately, all the site in question has to do is override 'location' with a dummy function or variable in their page, and it would negate that trick :-(

Are you sure you got the right IP address? I would have thought that the best way...

Dan



Coedit Limited - Delivering standards compliant, accessible web solutions

Dan's Page [blue]@[/blue] Code Couch:

http://www.codecouch.com/dan/

Code Couch Tech Snippets & Info:

http://www.codecouch.com/

 

[feherke]

Hi

Unfortunately, all the site in question has to do is override 'location' with a dummy function or variable in their page, and it would negate that trick

That sounds bad. I tried to reproduce it, but no success. If you have a demo for this, could you pleas post it ? Thank you.

Feherke.

http://rootshell.be/~feherke/

 

[BillyRayPreachersSon]

It looks like since I last tried it (admittedly this was at least 6 years ago) all major browsers have fixed that workaround.

So it looks like frame breaking is no problem any more (you can't even use JS setters to nobble 'location').

Dan







Coedit Limited - Delivering standards compliant, accessible web solutions

Dan's Page [blue]@[/blue] Code Couch:

http://www.codecouch.com/dan/

Code Couch Tech Snippets & Info:

http://www.codecouch.com/

 

[feherke]

Hi

Got it. Thank you for the information.


Feherke.

http://rootshell.be/~feherke/