diff --git a/core/loader.php b/core/loader.php index 7b9fc0b..501ea74 100644 --- a/core/loader.php +++ b/core/loader.php @@ -7,6 +7,9 @@ // Set the php coockie id only visible over http ini_set('session.cookie_httponly', true); +// Prevent Loading iframe to other website +header("X-Frame-Options: DENY"); + // Check if the PHP version is at leat 7.0 if( version_compare(PHP_VERSION, '7.0.0') <= 0 ) { header('HTTP/1.0 403 Forbidden');