validation

header('X-FRAME-OPTIONS: DENY');