From 8c5b27d54707f9805b27ef26ad741f2801e30e1f Mon Sep 17 00:00:00 2001 From: Khurshid Alam <89677621+kmkalam24@users.noreply.github.com> Date: Sat, 4 Mar 2023 16:36:41 +0600 Subject: [PATCH] Set X-Frame-Option --- core/loader.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/core/loader.php b/core/loader.php index 7b9fc0b..501ea74 100644 --- a/core/loader.php +++ b/core/loader.php @@ -7,6 +7,9 @@ // Set the php coockie id only visible over http ini_set('session.cookie_httponly', true); +// Prevent Loading iframe to other website +header("X-Frame-Options: DENY"); + // Check if the PHP version is at leat 7.0 if( version_compare(PHP_VERSION, '7.0.0') <= 0 ) { header('HTTP/1.0 403 Forbidden');