仅允许通过 iFrame 访问 URL 并防止在 PHP 中直接访问

Question

I have a website folder with some content in PHP. And I want it to be accessed only via iframe. And want to prevent using direct URL access.

Allow access <iframe src="example.com/chocos.php"></iframe>

And redirect accessing the example.com/chocos.php URL if directly accessed.

I have added a javascript for this purpose.

<script>if(window==window.top) { window.location.href = "/"; } </script>

But I want to do this using PHP. Can anyone help me solve this problem?

Answer 1

You can achieve that with php using cookies:

On the main page that have the iframe code, save a new cookie without setting an expiration date for it:

setcookie("allowAccess", 1);

then, on the file that is loaded into the iframe, "chocos.php" in your case:

if(isset($_COOKIE['allowAccess'])
    {
       //your content here;
    }
else
    {
       //your redirection here
    }

so if the user doesn't visit the main page, the alloweAccess cookie won't set in the browser, so the iframe page will do the redirection as you want.