I have a frame hosted on one domain that subscriber websites (with other domains) will be able to incorporate in their websites by framing or using an iframe. I am looking for a way I can prevent rogue websites from framing this frame, hence stealing it's content.
(Please look at the example at http://allstarcomputing.com/svtframetest.asp
to see how this currently looks if I am not being clear).
My idea is that I need to get the URL of the parent frame to compare with the intended parent URL for validation, but my attempts have failed. Specifically when I try to get the Parent window URL with a I get a message (IE6) "Access is denied". (I don't get this message when I use this frame on it's own domain's frameset, only when I try to frame it with a different domain.
I won't be able to control much on the subsciber's side other than to provide them with a link and perhaps some HTML code they could incorporate - I want it simple for them, but I do have server side capabilities on the frame's server.
Sorry to be so long but I want to make my problem clear.
The question is: How can I validate that the framing site actually corresponds to the site URL encoded in the frame's URL?