There have been a couple times where I’ve found that one of my sites was showing completely under another individual’s very similar URL. They embedded my WordPress site in their frames (my actual site, now lives at my URL and in their container where they’re definitely up to something).

To get a WordPress site to always pop out of someone’s frames and go to the correct URL (visit the real site), PHP can be used to write some JavaScript to our site’s document head.

What this does is to check if the site is being presented within frames, and if so, it changes the URL to “break out” of their frames and go to the real URL.

Place the following code anywhere in your child theme’s functions.php document.

// break WordPress site out of frames
function break_out_of_frames() {
    if (!is_preview() && !is_customize_preview()) {
        echo "\n<script type=\"text/javascript\">";
        echo "\n<!--";
        echo "\nif (parent.frames.length > 0) { parent.location.href = location.href; }";
        echo "\n-->";
        echo "\n</script>\n\n";
    }
}
add_action('wp_head', 'break_out_of_frames');