I\'m currently developing a site which runs standalone and as a facebook app on an iframe I was wondering what whold be \"best practice\" for checking if my page is ran in a
$signed_request = $_POST['signed_request']; if(empty($signed_request)) die('No direct access.');