From: Jakub Vrana <jakub@vrana.cz>
Date: Thu, 17 Feb 2011 20:22:21 +0000 (+0100)
Subject: Support SameOrigin
X-Git-Tag: v3.2.0~9
X-Git-Url: https://git.joonet.de/?a=commitdiff_plain;h=3e94e9d5f96195af3b71e1c9d2fff1f4f01a65de;p=adminer.git

Support SameOrigin
---

diff --git a/plugins/frames.php b/plugins/frames.php
index 086e0545..8cbebd9d 100644
--- a/plugins/frames.php
+++ b/plugins/frames.php
@@ -1,14 +1,26 @@
 <?php
 
-/** Allow using Adminer inside a frame
+/** Allow using Adminer inside a frame (disables ClickJacking protection)
 * @author Jakub Vrana, http://www.vrana.cz/
 * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License, Version 2.0
 * @license http://www.gnu.org/licenses/gpl-2.0.html GNU General Public License, version 2 (one or other)
 */
 class AdminerFrames {
+	var $sameOrigin;
+	
+	/**
+	* @param bool allow running from the same origin only
+	*/
+	function AdminerFrames($sameOrigin = false) {
+		$this->sameOrigin = $sameOrigin;
+	}
 	
 	function headers() {
+		if ($this->sameOrigin) {
+			header("X-Frame-Options: SameOrigin");
+		}
 		header("X-XSS-Protection: 0");
+		return true;
 	}
 	
 }