Web security: Click Jacking

Click Hijack Click Jacking
Loading hacked sites through an IFRAME to Web sites maintained by hackers themselves
With Z-index overlay and position positioning, the information of 2 websites is stacked on a stereoscopic projection surface, and transparency is set through opacity.
Induce the normal user to click the button.

Defense:
JS Defense:
if (top.location! = self.location) {top.location=self.location;}
The most effective Defense:
X-frame-options is a Microsoft-proposed HTTP header specifically designed to protect against click Hijacking attacks that use IFRAME nesting.

PHP Settings: Header ("X-frame-options:deny");
Deny: Deny any domain load
Sameorigin: Allow loading under homologous domain
Allow-from: You can define a page address that allows frame loading

Web security: Click Jacking