Apache Development
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationApache Development

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old July 26th, 2002, 07:41 AM
-=-steve-=- -=-steve-=- is offline
Devshed Gringo
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2000
Location: Toronto, Ontario
Posts: 417 -=-steve-=- User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 5 h 12 m 20 sec
Reputation Power: 9
Question Preventing leeching?

Hi everyone! I have a script that displays images stored in a database. To prevent leeching I used PHP and HTTP_REFERER but we all know this isn't an exact science.

I want to prevent the script (image_data.inc.php) from being used from another domain. Isn't there something I can do in the http.conf file to make sure the script is only ran from mydomain.com?

Thanks a million!
Steve

Reply With Quote
  #2  
Old July 26th, 2002, 07:58 AM
freebsd freebsd is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2001
Posts: 5 freebsd User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
It's been discussed thousands of times so please search with the keywords like: hot linking, image protect or so.

Reply With Quote
  #3  
Old July 26th, 2002, 08:14 AM
-=-steve-=- -=-steve-=- is offline
Devshed Gringo
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2000
Location: Toronto, Ontario
Posts: 417 -=-steve-=- User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 5 h 12 m 20 sec
Reputation Power: 9
Okay didn't know about the other terms. It still uses HTTP_REFERER... I guess this has the same problems as my PHP script. Well it isn't really a problem... Thanks!


RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?mydomain.com/.*$ [NC]
RewriteRule \.(gif|jpg|png|css|js)$ - [F]

Reply With Quote
  #4  
Old July 26th, 2002, 10:47 AM
freebsd freebsd is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2001
Posts: 5 freebsd User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
If you have such PHP script just specify the HTTP_REFERER explicitly in the RewriteCond. Your first condition is not even needed in that case.

Your RewriteRule also doesn't really match anything. That should be absolute URI so please fix that.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationApache Development > Preventing leeching?


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump



 Free IT White Papers!
 
How to Present Effectively Online
This white paper offers practical and actionable advice on the key steps that any presenter should consider as they plan and execute a Webinar or online meeting.

 
Open Source Security Myths
Open Source Software (OSS) is computer software whose source code is available to the general public with relaxed or non-existent intellectual property restrictions (or arrangement such as the public domain), and is usually developed with the input of many contributors.

 
Power and Cooling Capacity Management for Data Centers
This paper describes the principles for achieving power and cooling capacity management.

 
Scalable, Fault-Tolerant NAS for Oracle - The Next Generation
For several years NAS has been evolving as a storage alternative for Oracle databases, and for good reason: NAS is quite often the simplest, most cost-effective storage approach for Oracle. Learn about the benefits that HP's approach to scalable NAS brings to Oracle environments in this comprehensive white paper.

 
Understanding Web Application Security Challenges
This white paper discusses many common threats and preventive measures for Web application security, and explains what you can do to help protect your organization.

 

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2009 by Developer Shed. All rights reserved. DS Cluster 3 hosted by Hostway
Stay green...Green IT