Cross site frame title hack:

This script will allow you to manipulate a frameset title even across domains which is sometimes used to create hoax pages. The visitor will think he is at yahoo.com (for example) but is really still in your domain.

This code will be your frameset page: Now in the "hidden page" place this code:

Or you could use the below code to fake the framesets title where ever they go:
You may or may not have trouble with the below code.


<body onLoad="parent.document.title=top.frames['hoaxed'].document.title;">

A possable solution to help web designers avoid this type of scripting attack is to simply add a framebreaker script to your page and if someone tries to load your page within a frameset it will automaticlly break your page out of there frame. This code is below:


<script>
if(self.location!=top.location) top.location.href="http://www.yoursite.com";
</script>

Or you could even go as far as:


<script>
var domain="www.yoursite.com";

if(self.location!=top.location)
{
     if(confirm('IMPORTANT SECURITY NOTICE from:\
'+domain+'! \n\nThe website you just came from has possibly \nattempted \
to hijack your browser! To notify \nthe webmaster of '+domain+' click \'C\
ANCEL\'\n or click \'OK\' to continue on to '+domain+''));

     else
          top.location.href="http://"+domain+"/path/to/notifyWebmaster.php";
}
</script>

Click here to go back.