Any way to stop people from img "framing" your site?

Posted by Yegor on Server Fault See other posts from Server Fault or by Yegor
Published on 2010-06-05T04:28:32Z Indexed on 2010/06/05 6:03 UTC
Read the original article Hit count: 313

Filed under:

hotlinking

|

website-attack

Someone was trying to get cute with me, by "iframeing" my search result page via an IMG tag with 0 width and 0 height, in hopes of killing my server resources. My searches are cached, so it doesn't do much damage, since its just a static file being served, but I was wondering if there was anything I can do to "fight back"? I know you can use a frame breaker, had it been an iframe. Is there anything to do in the case of an image?

© Server Fault or respective owner

Related posts about hotlinking

blocking hotlinking with .htaccess only works for plain domain, when preceeded by www no block

as seen on Server Fault - Search for 'Server Fault'
Having tried all sorts of suggestions popping up from google, I am at my wit's end. Presently I use a solution created with htaccesstools.com/hotlink-protection/ RewriteEngine on RewriteCond %{HTTP_REFERER} !^$ RewriteCond %{HTTP_REFERER} !^http://(www\.)?mydomain.tld/.*$ [NC] RewriteRule \.(gif|jpg|jpeg|png|js|css)$… >>> More
Efficient Method for Preventing Hotlinking via .htaccess

as seen on Stack Overflow - Search for 'Stack Overflow'
I need to confirm something before I go accuse someone of ... well I'd rather not say. The problem: We allow users to upload images and embed them within text on our site. In the past we allowed users to hotlink to our images as well, but due to server load we unfortunately had to stop this. Current… >>> More
Image hotlinking providers?

as seen on Pro Webmasters - Search for 'Pro Webmasters'
I use a lot of images in my wordpress and due to hosting restrictions I need to host the images somewhere else and hotlink them in my blog posts. So I am looking for some reliable image host which provides free hotlinking service. The Google Picasa would be best, but I think they do not allow hotlinking… >>> More
Hotlinking images in Outlook emails

as seen on Super User - Search for 'Super User'
I want to create an email with a signature that contains an external image. For example, I would like to always include my SuperUser flair in my signature like so: http://superuser.com/users/flair/53525.png This can be done if I insert an image and select the above source. The problem occurs when… >>> More
.htaccess: Redirect Hotlink Flash --> Site with embed Flash

as seen on Pro Webmasters - Search for 'Pro Webmasters'
I have some .php sites that embeds .swf files. These .swf files are now linked to by some other guys. And I don't want them to simply open the SWF, I want them to force being redirect to the page where the flash is embed. Data: Site: www.example.com/1 (www.example.com/2, www.example.com/3 and so… >>> More

Related posts about website-attack

website attack form submission triggering emails related questions

as seen on Pro Webmasters - Search for 'Pro Webmasters'
We are experiencing website attacks that trigger the submission of a form, and send alert emails. Normal process of form submission is to fill up a couple of text fields, and when the user is redirected, the next page processes $_POST. If $_POST exists, then the email to intended form recipients… >>> More
Website visitors are still being redirected after "fixing" the damage from a conditional redirect website attack

as seen on Server Fault - Search for 'Server Fault'
BACKGROUND A website of mine was recently the target of a conditional redirect attack. PHP code was added to my pages to redirect visitors. The .htaccess file was edited to redirect visitors. I've re-uploaded my website so the compromised PHP and .htaccess code have both been removed. My site… >>> More
How to stop a ICMP attack?

as seen on Server Fault - Search for 'Server Fault'
We are under a heavy icmp flood attack. Tcpdump shows the result below. Altough we have blocked ICMP with iptables tcpdump still prints icmp packets. I've also attached iptables configuration and "top" result. Is there any thing I can do to completely stop icmp packets? [root@server downloads]# tcpdump… >>> More
Website attacked with a hidden iframe (q5x.ru)

as seen on Server Fault - Search for 'Server Fault'
A website of mine has recently been infected with some sort of attack that involved injecting a hidden iframe, and it's source was from a site q5x.ru (do not link). A Google search didn't help me in figuring out how this attack my have took place, so I was wondering if anyone of you may have encountered… >>> More
What sort of attack URL is this?

as seen on Server Fault - Search for 'Server Fault'
I set up a website with my own custom PHP code. It appears that people from places like Ukraine are trying to hack it. They're trying a bunch of odd accesses, seemingly to detect what PHP files I've got. They've discovered that I have PHP files called mail.php and sendmail.php, for instance. They've… >>> More