Are there any best practices for preventing users from viewing the exact URLs of individual frames in a frameset?

When using framesets in a website, it is common for users to be able to view the exact URLs of individual frames by right-clicking and selecting "View Frame Source". To prevent users from easily accessing these URLs, one best practice is to use PHP to create a proxy script that fetches the content of the frames and displays it within the parent frame. This way, users will only see the parent frame's URL and not the individual frame URLs. 

<?php
// Proxy script to prevent users from viewing individual frame URLs
$url = $_GET['url'];

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

$content = curl_exec($ch);

curl_close($ch);

echo $content;
?>

Keywords

PHP frameset URL security obfuscation

Related Questions