Are Iframes Bad?
 

I've been looking for a solution to tieing a photo rating script into http://www.tijuana-tonight.com
I couldn't get SSl to do it becouse the whole directory needs to be included, and I think that's also why I couldn't get a php include to work.
I can make it work the way I want with Iframes is this going to effect many of my surfers?

Someone hacked into one of my sites and attached a virus to my templates with Iframe |angry|

iFrames can be very useful. We used to use one on our old cam site. Not all browsers support them though(at least back in those days).

Hey Pat,

Can you post here what you're trying to include, or failing that PM me and I'll take a peak. IFrames should work but as mentioned they can be vulnerable. I'll do my best to find you a better solution. |shake|

Hi Venturi
I really appreciate any help
Is it possible to include a whole script?
The photo rating script is in a folder called raterank
I've tried these includes with no luck (nothing comes up)




These are the files and image folder used in the script
raterank/nextdoor/raterank.php
raterank/nextdoor/config.php
raterank/nextdoor/echorank.php
raterank/nextdoor/rate.php
raterank/nextdoor/echopics.php
raterank/nextdoor/mailform.php
raterank/nextdoor/sendmail.php
raterank/nextdoor/showpic.php
raterank/nextdoor/showall.php
raterank/nextdoor/topcat.php
raterank/nextdoor/viewpic.php
raterank/nextdoor/Images/ (folder)

Heya Pat,

Can you insert this into your HTML document and it show up? :

HI THERE PAT!"; ?>

Let me know if that shows up. :)

yep that worked this is what I got
HI THERE PAT!"; ?>

OK, that's not what I was hoping for. :/

Looks to me that your server's apache isn't setup to allow .PHP includes directly in HTML files.

Try this:


If that doesn't work, then we'll either have to:
1. Go with iframes. :(
2. Add an entry to htaccess to parse html for php
3. Get your server admin to adjust apache to parse for php.

Lemme know how this last experiment goes. :)

No that didn't work

The other script I have loaded on that site uses includes, could that be the problem?

function BodyHeader($title)
{
?>


// include the config files
include ("body.php");
include ("functions.php");
include ("config.php");

Venturi
Thanx for the help |shake|
My long lost programmer is back
and I think he's got it all figured out.

As mentioned Iframes are exploitable the main risk with them is a cheating webmaster who uses them to install dialers or viruses though.

One thing to consider though is internet explorer 6 and above maybe even from 5.5 dont allow Iframes in the default security settings.

Hey Pat!

Sorry, I'm late getting back to you and glad you got it worked out!

Last night around 11pm my computer told me my hard drive disappeared into the Twilight Zone. Been fighting it all day. Turns out it was just the heat sink on my CPU fan was so clogged with crap the CPU was overheating. *whew* I'm behind on backups and that scared the crapola out of me. |pcsucks|

Hard Drive Failure my number 1 fear
Glade it to hear you dogged that bullet