Restrictions and "hacks" with an IFrame?

[user-7256]

Hey,

Suppose I set an IFrame's width and height to be 100% - what can I find out about the contained webpage?

can I know its URL and source code in ANY way? via PHP or Javascript? Even HTML? Can Javascript bust out of an iFrame?

Thanks,
-Matt

 

[tgo]

Pretty sure js can bust out of any frame very simply.

As for getting some info on the page...
I am sure php can get alot, like headers, source, page name, url.
Just not sure on how exactly.

 

[sjaguar13]

JavaScript can bust out of the iFrame if this is on the frame src page:
<script language="JavaScript">
<!--Break out of frames
if (top.frames.length!=0)
top.location=self.document.location;
//-->
</script>

To find out what page the source is in ANY way you can:
1) Right click and view source, find the frame and look at what src equals
2) A lame PHP script could load the page and search the source code for iframe src=" and scrap whatever it is
3) If the iframe has an ID, Javascript can do it by document.getElementById('iFrameID').src (you could use this with the above bust out script, if you wanted to put it on the page that has the iFrame)

 

[user-7256]

Hm, thanks... I'll look into it. Any ideas of specific techniques?