diff --git a/login.php b/login.php
index 20663e7d..36bb00cc 100644
--- a/login.php
+++ b/login.php
@@ -1,5 +1,7 @@
 <?php
 
+header("X-Frame-Options: DENY");
+
 if (!file_exists('config.php')) {
     header("Location: setup.php");
     exit;
diff --git a/portal/check_login.php b/portal/check_login.php
index 7995dbd9..2de0347a 100644
--- a/portal/check_login.php
+++ b/portal/check_login.php
@@ -15,7 +15,7 @@ if (!isset($_SESSION)) {
     session_start();
 }
 
-if (!$_SESSION['client_logged_in']) {
+if (!isset($_SESSION['client_logged_in']) || !$_SESSION['client_logged_in']) {
     header("Location: login.php");
     die;
 }
diff --git a/portal/login.php b/portal/login.php
index ceecafe6..0dce1e80 100644
--- a/portal/login.php
+++ b/portal/login.php
@@ -4,6 +4,8 @@
  * Landing / Home page for the client portal
  */
 
+header("X-Frame-Options: DENY");
+
 $session_company_id = 1;
 require_once('../config.php');
 require_once('../functions.php');
diff --git a/portal/portal_header.php b/portal/portal_header.php
index ecc88dc2..e7af2edc 100644
--- a/portal/portal_header.php
+++ b/portal/portal_header.php
@@ -3,6 +3,8 @@
  * Client Portal
  * HTML Header
  */
+
+header("X-Frame-Options: DENY");
 ?>
 
 <!DOCTYPE html>
