[syrus.xl]

Originally Posted by ravencr

Isn't the facebook like boxes, etc all iFrame based?

Chris

Yes, the iframe tag is used with Facebook, but in a very controlled manner. Facebook does have strict security measures in place, this is to reduce them from being attacked.

What you are doing is allowing anyone to come on your forum and use the iframe tag, you have no control on what url is posted. It is bad enough trying to fix a site that has been compromised with a iframe url, yet alone allowing anyone to post it in a message. iframes are normally posted hidden on forums and not through posts, this eventually becomes noticed by Google, whom will block your site with their red 'Attack Page' - unless this is fixed quite quickly your Page Rank will drop, and may lead to your forum infecting others.