meta http-equiv="X-Frame-Options" content="DENY"
top of page
bottom of page