我如何知道（在服务器端）是否有人从iframe或直接来到它？ 见里面[重复]

Question

This question already has an answer here:

• How to identify if a webpage is being loaded inside an iframe or directly into the browser window? 15 answers

Say, I have a site with URL site.com . How do I know if a referrer gets my URL from an iframe, like this: <iframe src="http://site.com"></iframe> OR a referrer CLICKS (!!) this link at some site, where link is a usual a-tag: <a href="http://site.com">go to site</a> ?

I wanna tell those two apart on my server-side. Maybe, there is a way to do that via JS? Thanks in advance.

</div>

Answer 1

It can be done in javascript, but not on the server-side directly. You can, however, pass this information to the server by redirecting in one of the two cases with a simple javascript:

if (window.self === window.top) {
  // you're not in an iframe
} else {
  // in an iframe (or other frames), act accordingly
}

Optionally, if you just want to prevent your site from being viewed in an iframe, you can do this by sending an X-Frame-Options header.