如何限制对 PHP 文件的访问，以便只能通过服务器中的 iframe 访问它？

Question

I have a content.php file on my server that I need to load in an iframe on another page mask.php . This works just fine but I do not want content.php to be reachable at mydomain.com/content.php, only at mydomain.com/mask.php via iframe.

Is there a way to restrict the access to content.php to only via iframe on same server? PHP or HTTP?

I read about restricting the referrer of content.php , so that it has to be mask.php for it to load but it doesn't seam to work. I can imagine that it should be doable with PHP.

Answer 1

mask.php

<?php
if($_SERVER['REQUEST_URI']==='/mask.php' && $_SERVER['SCRIPT_NAME']==='/mask.php')
{
include("content.php");
}
?>

content.php

<?php

if($_SERVER['REQUEST_URI']==='/content.php' && $_SERVER['SCRIPT_NAME']==='/content.php')
{
die('No Access');
}
elseif($_SERVER['REQUEST_URI']==='/mask.php' && $_SERVER['SCRIPT_NAME']==='/mask.php')

{

echo 'hello';

}

?>