Add a X-FRAME-OPTIONS header to prevent clickjacking, as suggested by PhonicUK ( http://www.reddit.com/r/admincraft/comments/1p6t04/rfwadmin_my_web_interface_for_minecraft_servers/cczmyhg ).