function send_frame_options_header() { @header( 'X-Frame-Options: SAMEORIGIN' ); }