Are Iframes Bad?

T Pat · 2004-09-01, 09:17 PM

I've been looking for a solution to tieing a photo rating script into http://www.tijuana-tonight.com
I couldn't get SSl to do it becouse the whole directory needs to be included, and I think that's also why I couldn't get a php include to work.
I can make it work the way I want with Iframes is this going to effect many of my surfers?

Surfn · 2004-09-01, 09:21 PM

Someone hacked into one of my sites and attached a virus to my templates with Iframe

GunnCat · 2004-09-01, 10:50 PM

iFrames can be very useful. We used to use one on our old cam site. Not all browsers support them though(at least back in those days).

venturi · 2004-09-02, 04:53 AM

Hey Pat,

Can you post here what you're trying to include, or failing that PM me and I'll take a peak. IFrames should work but as mentioned they can be vulnerable. I'll do my best to find you a better solution.

T Pat · 2004-09-02, 09:43 AM

Hi Venturi
I really appreciate any help
Is it possible to include a whole script?
The photo rating script is in a folder called raterank
I've tried these includes with no luck (nothing comes up)
<? include("http://www.tijuana-tonight.com/raterank/nextdoor/raterank.php") ?>
<? include("/raterank/nextdoor/raterank.php") ?>
<? include("raterank/nextdoor/raterank.php") ?>

These are the files and image folder used in the script
raterank/nextdoor/raterank.php
raterank/nextdoor/config.php
raterank/nextdoor/echorank.php
raterank/nextdoor/rate.php
raterank/nextdoor/echopics.php
raterank/nextdoor/mailform.php
raterank/nextdoor/sendmail.php
raterank/nextdoor/showpic.php
raterank/nextdoor/showall.php
raterank/nextdoor/topcat.php
raterank/nextdoor/viewpic.php
raterank/nextdoor/Images/ (folder)

venturi · 2004-09-02, 05:30 PM

Heya Pat,

Can you insert this into your HTML document and it show up? :

<?php echo "<h4>HI THERE PAT!</h4>"; ?>

Let me know if that shows up.

T Pat · 2004-09-02, 05:41 PM

yep that worked this is what I got
HI THERE PAT!"; ?>

venturi · 2004-09-02, 08:15 PM

OK, that's not what I was hoping for. :/

Looks to me that your server's apache isn't setup to allow .PHP includes directly in HTML files.

Try this:


If that doesn't work, then we'll either have to:
1. Go with iframes.

2. Add an entry to htaccess to parse html for php
3. Get your server admin to adjust apache to parse for php.

Lemme know how this last experiment goes.

T Pat · 2004-09-02, 08:56 PM

No that didn't work

The other script I have loaded on that site uses includes, could that be the problem?

<?
function BodyHeader($title)
{
?>

<?
// include the config files
include ("body.php");
include ("functions.php");
include ("config.php");

T Pat · 2004-09-03, 07:27 PM

Venturi
Thanx for the help

My long lost programmer is back
and I think he's got it all figured out.

Pornstar Dames · 2004-09-03, 09:34 PM

As mentioned Iframes are exploitable the main risk with them is a cheating webmaster who uses them to install dialers or viruses though.

One thing to consider though is internet explorer 6 and above maybe even from 5.5 dont allow Iframes in the default security settings.

venturi · 2004-09-03, 10:07 PM

Hey Pat!

Sorry, I'm late getting back to you and glad you got it worked out!

Last night around 11pm my computer told me my hard drive disappeared into the Twilight Zone. Been fighting it all day. Turns out it was just the heat sink on my CPU fan was so clogged with crap the CPU was overheating. *whew* I'm behind on backups and that scared the crapola out of me.

T Pat · 2004-09-04, 02:26 PM

Hard Drive Failure my number 1 fear
Glade it to hear you dogged that bullet

2004-09-01, 09:17 PM	#1
T Pat You can now put whatever you want in this space :) Join Date: Aug 2003 Location: Paridise Posts: 3,244	Are Iframes Bad? I've been looking for a solution to tieing a photo rating script into http://www.tijuana-tonight.com I couldn't get SSl to do it becouse the whole directory needs to be included, and I think that's also why I couldn't get a php include to work. I can make it work the way I want with Iframes is this going to effect many of my surfers?

2004-09-01, 09:21 PM	#2
Surfn If you don’t take a chance the Angels won’t dance Join Date: Aug 2003 Location: Earth on occasion Posts: 8,812	Someone hacked into one of my sites and attached a virus to my templates with Iframe __________________ Surfn's Links Are you a partner?

2004-09-02, 04:53 AM	#4
venturi No offence Apu, but when they were handing out religions you must have been out taking a whizz Join Date: Apr 2003 Location: An Oasis atop a High Desert Mesa Posts: 282	Hey Pat, Can you post here what you're trying to include, or failing that PM me and I'll take a peak. IFrames should work but as mentioned they can be vulnerable. I'll do my best to find you a better solution. __________________ Please Re-Read The Rules For Sig Files

2004-09-02, 05:30 PM	#6
venturi No offence Apu, but when they were handing out religions you must have been out taking a whizz Join Date: Apr 2003 Location: An Oasis atop a High Desert Mesa Posts: 282	Heya Pat, Can you insert this into your HTML document and it show up? : <?php echo "<h4>HI THERE PAT!</h4>"; ?> Let me know if that shows up. __________________ Please Re-Read The Rules For Sig Files

2004-09-02, 08:15 PM	#8
venturi No offence Apu, but when they were handing out religions you must have been out taking a whizz Join Date: Apr 2003 Location: An Oasis atop a High Desert Mesa Posts: 282	OK, that's not what I was hoping for. :/ Looks to me that your server's apache isn't setup to allow .PHP includes directly in HTML files. Try this: <!--# include virtual="raterank/nextdoor/raterank.php" --> If that doesn't work, then we'll either have to: 1. Go with iframes. 2. Add an entry to htaccess to parse html for php 3. Get your server admin to adjust apache to parse for php. Lemme know how this last experiment goes. __________________ Please Re-Read The Rules For Sig Files

2004-09-01, 10:50 PM	#3
GunnCat You can now put whatever you want in this space :) Join Date: Aug 2004 Posts: 547	iFrames can be very useful. We used to use one on our old cam site. Not all browsers support them though(at least back in those days).

2004-09-02, 09:43 AM	#5
T Pat You can now put whatever you want in this space :) Join Date: Aug 2003 Location: Paridise Posts: 3,244	Hi Venturi I really appreciate any help Is it possible to include a whole script? The photo rating script is in a folder called raterank I've tried these includes with no luck (nothing comes up) <? include("http://www.tijuana-tonight.com/raterank/nextdoor/raterank.php") ?> <? include("/raterank/nextdoor/raterank.php") ?> <? include("raterank/nextdoor/raterank.php") ?> These are the files and image folder used in the script raterank/nextdoor/raterank.php raterank/nextdoor/config.php raterank/nextdoor/echorank.php raterank/nextdoor/rate.php raterank/nextdoor/echopics.php raterank/nextdoor/mailform.php raterank/nextdoor/sendmail.php raterank/nextdoor/showpic.php raterank/nextdoor/showall.php raterank/nextdoor/topcat.php raterank/nextdoor/viewpic.php raterank/nextdoor/Images/ (folder)

2004-09-02, 05:41 PM	#7
T Pat You can now put whatever you want in this space :) Join Date: Aug 2003 Location: Paridise Posts: 3,244	yep that worked this is what I got HI THERE PAT!"; ?>

2004-09-02, 08:56 PM	#9
T Pat You can now put whatever you want in this space :) Join Date: Aug 2003 Location: Paridise Posts: 3,244	No that didn't work The other script I have loaded on that site uses includes, could that be the problem? <? function BodyHeader($title) { ?> <? // include the config files include ("body.php"); include ("functions.php"); include ("config.php");

2004-09-03, 07:27 PM	#10
T Pat You can now put whatever you want in this space :) Join Date: Aug 2003 Location: Paridise Posts: 3,244	Venturi Thanx for the help My long lost programmer is back and I think he's got it all figured out. __________________ How To Keep An Asshole In Suspense I'll Tell You Later

2004-09-03, 09:34 PM	#11
Pornstar Dames A woman is like beer. They look good, they smell good, and you'd step over your own mother just to get one! Join Date: Jan 2004 Location: UK Posts: 58	As mentioned Iframes are exploitable the main risk with them is a cheating webmaster who uses them to install dialers or viruses though. One thing to consider though is internet explorer 6 and above maybe even from 5.5 dont allow Iframes in the default security settings. __________________ http://www.starletsofporn.com/webmasters

2004-09-03, 10:07 PM	#12
venturi No offence Apu, but when they were handing out religions you must have been out taking a whizz Join Date: Apr 2003 Location: An Oasis atop a High Desert Mesa Posts: 282	Hey Pat! Sorry, I'm late getting back to you and glad you got it worked out! Last night around 11pm my computer told me my hard drive disappeared into the Twilight Zone. Been fighting it all day. Turns out it was just the heat sink on my CPU fan was so clogged with crap the CPU was overheating. whew I'm behind on backups and that scared the crapola out of me. __________________ Please Re-Read The Rules For Sig Files

2004-09-04, 02:26 PM	#13
T Pat You can now put whatever you want in this space :) Join Date: Aug 2003 Location: Paridise Posts: 3,244	Hard Drive Failure my number 1 fear Glade it to hear you dogged that bullet __________________ How To Keep An Asshole In Suspense I'll Tell You Later