Why is it recommended to avoid using frames when displaying files from folders in PHP?

Using frames to display files from folders in PHP can lead to security vulnerabilities such as cross-site scripting attacks. It is recommended to avoid frames and instead use PHP functions like scandir() to retrieve the files from a folder and display them in a secure manner. 

$dir = "path/to/folder";

$files = scandir($dir);

foreach($files as $file){
    if($file != "." && $file != ".."){
        echo "<a href='$dir/$file'>$file</a><br>";
    }
}

Keywords

frames security vulnerability directory traversal include PHP restrictions

Related Questions