Webpage source code in Iframe with the help of php

Question

I want to show a url's source code in iframe tag. How to do it ? For example, I have this code.

<html>
<head>
    <title></title>
</head>
<body>
    <div>
        <?php $content = @file_get_contents("http://stackoverflow.com"); ?>
    </div>
</body>

How to show $content in iframe ?

MilMike · Accepted Answer · 2012-06-30T11:54:32.897

5

use this code: EDIT: iframe version..:

save this source as getsource.php

<html>
<head>
    <title></title>
</head>
<body>
    <div>
        <pre>
        <?= htmlentities( @file_get_contents($_GET['url'])); ?>
        </pre>    
</div>
</body>

then use your iframe somewhere on a different page and add src to getsource.php with url variable:

<iframe src="getsource.php?url=http://stackoverflow.com"></iframe>

This might be not safe, but i think the htmlentities will prevent xss attacks.

edited Jun 30 '12 at 11:54

answered Jun 30 '12 at 11:33

MilMike

12,571
15
65
82

@Abadis Not really.. If he hadn't used the htmlentities(), an XSS attack wouldn't be possible anyway. (If so, please comment how.) This is because the source code isn't processed with PHP, only gathered. +1 for good and straight forwards answer. – Friend of Kim Jun 30 '12 at 11:40
1

Why would you want it in an iframe? – Friend of Kim Jun 30 '12 at 11:41
Iframes aren't allowed anymore (HTML5) – Friend of Kim Jun 30 '12 at 11:41
@50ndr33 - [HTML5 - The iframe elment](http://dev.w3.org/html5/spec/the-iframe-element.html#the-iframe-element) – Alohci Jun 30 '12 at 11:42
1

an iframe need an address.put the address on a.php and in a.php write the code given to you.for xss attack i have to test!!! – Abadis Jun 30 '12 at 11:42
Aren't PHP short tags bad practice? – Eric Jun 30 '12 at 11:45
[Actually, looks like `=` is a special case](http://stackoverflow.com/a/6064813/102441) – Eric Jun 30 '12 at 11:47
@Eric `=` is a shorthand for ` – Friend of Kim Jun 30 '12 at 11:51
yes, = is a short tag for printing. is the same as – MilMike Jun 30 '12 at 11:51
@50ndr33, @qxxx: Did you read the post I linked to about `=`? - _"Starting PHP 5.4 the echo shortcut is a separate issue from short tags, as they will always be enabled"_ – Eric Jun 30 '12 at 11:52
@50ndr33 really? wow, didn't know that :) awesome! will read your linked post – MilMike Jun 30 '12 at 11:54
@Eric PHP 5.4 isn't yet supported by many vendors, so there will be a good chance that it will not work for him. It is always good to be on the safe side. If he asks a question like this, he probably didn't know about those short tags eighter... – Friend of Kim Jun 30 '12 at 11:55
@50ndr33 oops... sorry, i mean the post from "Eric" http://stackoverflow.com/a/6064813/102441 ;) – MilMike Jun 30 '12 at 11:56
@qxxx can't i combine the both in one file ? – nir Jul 02 '12 at 09:54

Friend of Kim · Answer 2 · 2012-06-30T11:58:21.570

3

Add this code to the main page:

<html>
<head>
    <title>Source Code</title>
</head>
<body>
<iframe src="phpscript.php">Your browser doesn't support iframes.</iframe>
</body>

Put this in phpscript.php:

<pre>
<?php echo htmlentities( @file_get_contents("http://www.example.com/")); ?>
</pre>

edited Jun 30 '12 at 11:58

answered Jun 30 '12 at 11:45

Friend of Kim

850
9
24

score 0 · Answer 3 · answered Jun 30 '12 at 11:34

0

Then you'll have to have a separate page with an iframe, whose src points to this page.

Though, may I ask why you have you use an iframe? It seems like you can just show it in a scrollable "div".

answered Jun 30 '12 at 11:34

Steven Luu

1,047
1
7
13

i want to show source code of a webpage to its owner when he/she clicks on the link 'see code' with some highlighted code. – nir Jun 30 '12 at 11:42

Webpage source code in Iframe with the help of php

3 Answers3