iFrame within an iFrame

Discussion in 'BlackHat Lounge' started by rnc505, Jan 29, 2009.

  1. rnc505

    rnc505 Regular Member

    Joined:
    Oct 28, 2008
    Messages:
    229
    Likes Received:
    109
    Okay... I just did a little test.

    The referrer website (that tells you who the referrer is) is: http://club60.org/testref.php

    The website that iFramed the referrer website is Website A and the website that iframed Website A is Website B.

    When you go to website B and it iframes WS A whcih iFrames the referrer website, the referrer website show WS A.

    Does this work for everything? Like can I cheat one of those link exchange scripts that count visitors from the referring website with this?

    Like if website B has high traffic and that way it can get website A high in the link exchange?

    Thanks for the help!

    rnc505
     
  2. exosus

    exosus Newbie

    Joined:
    Feb 7, 2008
    Messages:
    10
    Likes Received:
    1
    works for hiding your referrer if u use affiliate links
     
  3. calm

    calm Registered Member

    Joined:
    Dec 22, 2008
    Messages:
    98
    Likes Received:
    18
    Are there any performance hits with this method?
    How does this work with adwords does google frown upon this or is it acceptable?
     
  4. skweekykleen

    skweekykleen Newbie

    Joined:
    Jul 8, 2008
    Messages:
    46
    Likes Received:
    68
    I actually use a similar method, for hiding iframe parent from cpa networks...like this:

    PAGE VISITOR SEES (A) ---> PHP Script (B) ---> CPA OFFER (C)

    A uses an iFrame to show only the portion of the CPA Offer (C) that I want the visitor to see...framing the email field, etc...i use a PHP script (B) as a 'pass-through' and that shows up as the parent of C.

    I have some PHP code on B to ensure that B can only be visited or accessed from A. If someone accesses it directly, it simply shows the entire offer, looking like a very innocent (and easily explined) iFrame. Of course you could change B to redirect, show blank, or do whatever you wanted if accessed directly.

    There are a lot of possibilities with this, one being that A, B, and C don't even have to be on the same domain...so you could have your 'dirty' traffic being sent to A, CPA network only knows about B, and C of course is the offer itself.

    Fun stuff, eh?