What are the common pitfalls when trying to access GET variables within an <iframe> in PHP?

When trying to access GET variables within an <iframe> in PHP, a common pitfall is that the GET variables are not directly accessible within the PHP code of the iframe. To solve this, you can pass the GET variables from the parent page to the iframe by including them in the iframe's src attribute as query parameters. 

// Parent page
$variable = $_GET[&#039;variable&#039;];

// Iframe code with src attribute including GET variable
&lt;iframe src=&quot;iframe.php?variable=&lt;?php echo $variable; ?&gt;&quot;&gt;&lt;/iframe&gt;

// iframe.php
$variable = $_GET[&#039;variable&#039;];
echo $variable;

Keywords

GET variables iframe PHP cross-origin security

Related Questions