Free and Unlimited Web Hosting

Ensuring only web browsers can access your website

Ensuring only web browsers can access your website

InfinityFree provides a website hosting service. That means you can host your website on InfinityFree for free. InfinityFree cannot be used to host APIs, file or data storage and sharing services, bots, or hacking scripts.

To enforce this, all visitors trying to access your website are checked to ensure Javascript and cookies are enabled.

Every modern web browser supports Javascript and cookies and can be used to access your website without any problems, unless the visitors has specifically disabled Javascript or cookies. But that’s very rare, because almost every website today require Javascript and cookies to function correctly.

Which features are not supported?

Due to this system, the following website features are not supported.

  • Access through Android or iOS mobile apps.
  • API access to websites (like WordPress XML-RPC).
  • Access through cURL or other command line clients.
  • Website code validators and SEO checkers.
  • Domain ownership verification check which look at website URLs or HTML code. Some webmasters tools and ad networks do this.
  • Let’s Encrypt and websites providing certificates through Let’s Encrypt (like or
  • AJAX requests from other websites. AJAX requests are only possible on the same (sub)domain.
  • Hotlinking and embedding images and other (static) files on other websites.

Which errors can I expect?

When trying to access your website with an unsupported client, you may see one of the following errors:

  • 403 Forbidden
  • This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support
  • No ‘Access-Control-Allow-Origin’ header is present on the requested resource

Specifically, this is the content sent to the client to validate whether it supports Javascript:

<html><body><script type="text/javascript" src="/aes.js" ></script><script>function toNumbers(d){var e=[];d.replace(/(..)/g,function(d){e.push(parseInt(d,16))});return e}function toHex(){for(var d=[],d=1==arguments.length&&arguments[0].constructor==Array?arguments[0]:arguments,e="",f=0;f<d.length;f++)e+=(16>d[f]?"0":"")+d[f].toString(16);return e.toLowerCase()}var a=toNumbers("f655ba9d09a112d4968c63579db590b4"),b=toNumbers("98344c2eee86c3994890592585b49f80"),c=toNumbers("d3c143e907c1d71f78f0018d7dbf3ac7");document.cookie="__test="+toHex(slowAES.decrypt(c,2,a,b))+"; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/"; location.href="";</script><noscript>This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support</noscript></body></html>

How does this security system benefit me?

For starters, this security system helps protect your website against automated tools looking to do harm, like spam bots trying to spread harmful content on your website.

This security system also helps ensure that the available server power is used for fair purposes and is distributed evenly across all hosted websites. This means your actual websites will be fast, reliable and free.

Can search engine crawlers still access my website?

Despite being automated scripts, search engine spiders and crawlers can still access your website. The crawlers of all popular search engines execute the Javascript code they find on your website and accept cookies as well. So search engines will have no problems indexing your website and your site will be visible in search engine results.

If you suspect your site is not being indexed correctly by search engines, you may wish to sign up for the Webmasters service from search engines like Google and Bing. From there you will be able to see if the search engines have any problems accessing your site.

Can I disable this security system?

No, this security system is mandatory on all websites and cannot be disabled.

If this security system means your website or application does not work as expected on InfinityFree, please consider to moving your website to premium hosting. On premium hosting, this security system is not present (your website will be protected in less obtrusive ways), so you can access your website through other clients which are not browsers (like mobile apps, automated verification tools, etc.).

Still have questions? Check our forum!

Forget the stereotypes of free hosting!