Ensuring only web browsers can access your website

InfinityFree is a website hosting service. That means that the hosting accounts we provided are intended for hosting websites. Websites contain pages that are accessed through web browsers. InfinityFree is not intended to be used for file sharing, API hosting, database hosting or background tasks/tools.

To help enforce this, free hosting enforces a security system that makes sure that anyone trying to access your website is using a normal web browser. This is done by checking whether the web browser can execute Javascript code and can accept cookies.

Every modern web browser supports Javascript and cookies and can be used to access your website without any problems. Unless the visitor has specifically disabled Javascript or cookies in their browser, they can access your website without any problems. Almost all websites require cookies and Javascript to work correctly, so very few people will experience problems with this.

This security system also helps to protect your website against (malicious) bots. However, some functions of some applications won’t work correctly because of this system.

Which features are not supported?

Because of this security system, the following things will not work correctly or at all on websites on free hosting.

  • Access through Android or iOS mobile apps (mobile browsers work fine).
  • API access to websites (like WordPress XML-RPC).
  • Access from cURL or other command-line clients.
  • Website code validators and SEO checkers.
  • Domain ownership verification checks which look at website URLs or HTML code. Some webmasters tools and ad networks do this.
  • Let’s Encrypt and websites providing certificates through Let’s Encrypt (like sslforfree.com or zerossl.com).
  • AJAX requests from other websites (CORS). AJAX requests are only possible on the same (sub)domain.
  • Hotlinking and embedding images and other (static) files on other websites.

Which errors can I expect?

When trying to access your website with an unsupported client, you may see one of the following errors:

  • 403 Forbidden
  • This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support
  • No ‘Access-Control-Allow-Origin’ header is present on the requested resource

Specifically, content like this is sent to the browser to validate whether it supports Javascript:

<html><body><script type="text/javascript" src="/aes.js" ></script><script>function toNumbers(d){var e=[];d.replace(/(..)/g,function(d){e.push(parseInt(d,16))});return e}function toHex(){for(var d=[],d=1==arguments.length&&arguments[0].constructor==Array?arguments[0]:arguments,e="",f=0;f<d.length;f++)e+=(16>d[f]?"0":"")+d[f].toString(16);return e.toLowerCase()}var a=toNumbers("f655ba9d09a112d4968c63579db590b4"),b=toNumbers("98344c2eee86c3994890592585b49f80"),c=toNumbers("d3c143e907c1d71f78f0018d7dbf3ac7");document.cookie="__test="+toHex(slowAES.decrypt(c,2,a,b))+"; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/"; location.href="https://hans.epizy.com/?i=2";</script><noscript>This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support</noscript></body></html>

How does this security system benefit me?

The main advantage of this security system is that it’s very effective at blocking bad bots from accessing your website. There are many malicious crawlers on the internet who are searching for security problems to hack your website, rapidly guess login details to try and access protected sections in your website or hammer unprotected forms to send spam. This security system stops almost all of them.

Those malicious bots could also use a lot of server power, which can cause your website to be suspended if you use too much of it. So this security system helps to make sure that regular, legitimate website visitors can access your site without any problems.

Can search engine crawlers still access my website?

Despite being automated scripts, search engine crawlers can still access your website. The crawlers of all popular search engines can execute Javascript code and accept cookies. So search engines will have no problems indexing your website and your site can be visible in search engine results.

Note that some “search engine validator” scripts do not support Javascript and cookies, and will report that your website is inaccessible. However, this is an error with the validator tool, and does not prevent search engine crawlers from working correctly.

If you suspect your site is not being indexed correctly by search engines, you may wish to sign up for the Webmasters service from search engines like Google and Bing. From there you will be able to see if the search engines have any problems accessing your site.

Can I disable this security system?

No, this security system is mandatory on all websites and cannot be disabled.

If this security system means your website or application does not work as expected on InfinityFree, please consider to moving your website to premium hosting. On premium hosting, this security system is not present (your website will be protected in less obtrusive ways), so you can access your website through other clients which are not browsers (like mobile apps, automated verification tools, etc.).

Why do I see ?i=1 at the end of a URL
Can't Access My Website/API routes from another server!
Getting SSL certificates from sslforfree.com or zerossl.com
What does the CPU limit mean
What can I do with my hosting account
PWABuilder can't find web manifest (403 error)
Certificate verify failed
Why are my files deleted after uploading them
Certificate verify failed
Edit page with Nicepage plug-in on Wordpress stuck on loading
Exclude some sites from my account blacklist
Resource usage warning on 0 traffic site
Let's Encrypt & OpenGraph | Not Sub Domain - The certificate is not trusted in all web browsers
Having trouble installing statcounter on WordPress site
Having trouble installing statcounter on WordPress site
HTTP Request gives 302 Redirect
Telegram Bot wehook info erro
I Cannot Connect My Database For Login Forms
My Website Down - Ezoic Origin Error
Can i use PWA in infinityfree
Open Graph Not Showing
Is my website okay?
Ads.txt support
Unblock Port 80
The server Is probably offline | Error
Autorefresh redirect problem
I can’t get Google to crawl site
Can't install SSL Protection
Trying to make my website backwards compatible
Hosted site is not working because /aes.js is returning "This URLs or Page has been blocked."
Preflight (OPTION method) requests are redirected to the default 403 Forbidden page
Confused about running a php script without running a web page
I can’t get Google to crawl site
Browser complains about cookie "__test"
Cross Origin Read Blocking(CORB) on images
Unable to integrate quic.cloud
Unable to activate Cache-Control
Webpage Saving Speed and Cloudflare Question
I need help
Hi Can i host a rest API using infintyfree?
Few question about premium features
Unable to activate Cache-Control
The JavaScript code is not allowed
.gif not showing
GoGetSSL - Intermediate certificate issue
Error at Update Widget modification on Wordpress
Json_object php
Wordpress TTFB extremely long on first attempt
Embed .pdf from infinityFree domain on other webpage: not displayed
My website shows SSL errors
Mysql Databasses
I am not able to make REST request
Troubleshooting error returning json when acessing db table
WordPress error when saving: "There was an error. You are probably offline."
Is it ethical as per polices of Infinityfree to convert XML(RSS feed) data provided by public News portal into JSON and then export it from?
Can't resolve m3u8 playlists
403 forbidden
Themegril Demo importer not working/ loading
Indexing and Sitemap error in Google Search Console
Still no success with db and json
Tag img src
Capacity on my account
Title and meta description tags
When i press verify to check if my folder is uploaded it doesn't work
Couldn't connect to my database
HTTP request content type fix
Facebook preview debug: return document is empty
Embed Not working
Do infinityfree needs wordpress , is it mandatory?
Using Web Share API (https?)
Putting my site in PHP is a real problem for me
Unstable Website
FreeFind cannot index Epizy site
Gif files hosted on site not embedding
Website not opening in android studio
Cannot create a product using WoocommAPI
How can I access api.example.com at www.example.com
Access site API using automation tool
CORS policy
CORS policy
Hot do i remove X Frame option
Unable to read txt file loaded to the server
400 Bad Request Error
How to solve this
$_POST does not working
Integrate a website
Why is there a security system
Cannot use iFrame
Display website on WiX "embed a site" not working
Could you could assist me in determining why my website opens so slowly and why the Facebook sharing debugger returns an error?
Your host has enabled DDOS protection, the call cannot be excused.
Api not running perfectly
SSL shop connection fails
C# visual studio .NET application GET request not going through
Unable to play media files with media player third-party
Hit limit question
Website loading slow
Unwanted javascript message
Temp Mail Service
URL connection error
No site preview in discord
HTTP Headers
RSS Feed Error & Not Working
BandWidthModule in .htaccess
Htaccess - Need all variations to point to https:// (non www.)
Meta tag doesn't want to work
Taking data from page with onother program
Hello, it is not possible to upload a file to the site directory is it paid or free how to do it?
Files cannot be reached from other websites
CDN not working
WordPress Rest API
Cannot link to my files, nor access site through FTP client software
Some Problem With Server
Php app video not playing in video player but plays in chrome browser
Infinity free
Not connecting by Api, Any solution plz?
Problem With GET Method
Does infinityfree support renders?
Security Issues
Error I can't resolve (free account)
Free SSL certificates cause the website to lose it's preview image & description!
Curl error 52: Empty reply from server
Curl error 52: Empty reply from server
Cant use keyword density tools
How do I change the DNS configuration?
Can i use my site database as internet of things iot database?
Parked Domain names displays white & Black background
Stripe webhooks
Am I able to host my discord bot
API not working correctly
Preview image of my site doesn't show
Image preview for social media not showing
GTmetrix error on a brandnew Joomla 4 test site
How can I clear cache data from my websites?
Please I usually get this error anytime I want to validate my sitemap andy sitemap is not working
How can I clear cache data from my websites?
All online sitemap generator generates empty sitemap file?
How to set website to accept iframe links
Can't connect to FTP and MYSQL even if website is ready
SSL on www doesn't work
How do I get PWA to work?
GET and POST requests not working?
SEO not working in WordPress
Xmlrpc.php not loading
I can’t analize the SEO of my site
Prevent Linkvertise Bypass
All web pages return http 500 not sure why
All web pages return http 500 not sure why
All web pages return http 500 not sure why
Unable to connect to SQL vi PHP
All web pages return http 500 not sure why
All web pages return http 500 not sure why
CSS background-position Property
Search engine bots cannot read my URLs
MessageBird API not working on Domain
Domain key
Access to XMLHttpRequest has been blocked by CORS
Disable JavaScript requirement and site redirects to Google Support
Does InfinityFree (With WordPress) prevent rel="me" from working on sites like Mastodon?
Does InfinityFree (With WordPress) prevent rel="me" from working on sites like Mastodon?
404 error?
Where exactly the root folder
The CORS Problems
Cannot use view.officeapps.live.com with infinity free
.json files
I have this error Error establishing connection to host
Is InfinityFree hosting support webhook?
Facebook pixels not detected on my site
Question about premium upgrade and pings
Linking directly to images from another URL/forum?
Question about premium upgrade and pings
Error connecting automate.io to wordpress
Why does my website look different on my domain vs free subdomain?
Error connecting automate.io to wordpress
What does cause io overuse ? (these are my plugins)
Hi Can i host a rest API using infintyfree?
Iframe not working
Error: cURL error 35: error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error
Infinityfree blocking watchful.net?
Cant load file from desktop app
Critical path css generators not working
Issues with meta fields not detected by seo tool, but working on my other dev server

You have a spelling mistake.