blog documentation FAQ forum marketplace youtube

Error: Refused to display in a frame ('X-Frame-Options' to 'sameorigin')

The Jamroom Network » Documentation » Troubleshooting » Error: Refused to display in a frame ('X-Frame-Options' to 'sameorigin')
Applies to: Jamroom 7.0+ Last verified: 2026-10-24

Table of Contents:


The error
Allowing other sites to frame your pages
Advanced config keys

  • The error

    Another site tries to show a page of yours in an iframe, and the browser says:

    Refused to display '...' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

    Jamroom sends the X-Frame-Options: SAMEORIGIN header, so its pages can only be shown in a frame on your own site. That protects your members against clickjacking.

  • Allowing other sites to frame your pages

    Only do this if you need it. Add this line to data/config/config.php on your server:

    $_conf['jrCore_disable_xframe'] = true;

  • Then reset the caches. Jamroom no longer sends the header.

    This key isn't in the Advanced Config tool's list, so it has to be added to the file by hand.

  • Advanced config keys

    ACP > Modules > Core > System Core > Tools > Advanced Config adds other advanced settings to config.php, choosing from a list with help for each key, such as:

    Key Default What it does
    jrCore_max_system_queue_workers 12 The most queue workers at once
    jrCore_db_connect_timeout 2 Seconds to wait for the database
    jrCore_play_key_expire_hours 8 Hours until a play key expires
    jrCore_form_session_expire_hours 4 Hours until a form session expires
    jrImage_jpeg_quality 85 JPEG quality of resized images
    jrUser_login_activity_log on Set to off to stop logging logins

  • A wrong value can stop your site from working. Change these only if you need to, and note what you changed.

Tags