https image proxy

[Mellnik]

I am looking for a way to proxy non-SSL, images which users post, to a https image proxy.

Of course the proxy should not proxy every image, only those being posted on the forum and signatures.

bitcointalk.org has such system working. How to do it on vB4 or vB5?

I think a plugin would be very appreciate for many.

[kh99]

I see you already found the other thread where we were talking about this. Does this not do what you want: https://vborg.vbsupport.ru/showthread.php?t=288060 ? Later in the thread someone posted a change so that it just acts as a proxy and doesn't store it on your server.

[Mellnik]

Well I think the main problem here is that it does not prevent users from putting arbitrary image URLS to the proxy?
Imagine someone puts images with illegal content on it...

Also, this does this cover signatures?

[Mellnik]

Does anyone have an idea on how to restrict the image proxy to images actually posted on the forums?

[kh99]

I can think of a couple of ways. You could just keep a database table of allowed urls, but now your proxy has to do a database lookup (which may or may not be an issue). I was thinking of creating a hash of the url and a secret and including that as a parameter, then the proxy can use that to check. But a problem with that scheme is that you can't "revoke" one once it's out there.

[thetechgenius]

I downloaded an addon that does this, I downloaded the addon from here. I just modified it to work better with my server configuration. I just have to find it again.

However, when someone posts a non SSL URL to an image, the system automatically caches the images and stores it on your server, and replaces the HTTP Image URL with the Cached SSL/HTTPS Image URL. So your site doesn't warn users of mixed unsecured content.

I will try to find it on here and post the link when I find it.

[kh99]

I think that's the link I posted in post #2.

[thetechgenius]

I think that's the link I posted in post #2.

I just looked at the Addon you linked to, and yes that is it! I have it on my site, and it works perfect. The Addon does all the work for you, the end-user or you, dont have to do anything. It automatically caches the image, and replaces the URL in the post with the cached image URL.

I like how the addon also keeps the original website in the cached URL, so you know exactly where the image came from.

Like this:



https://example.com/cache.php?img=http%3A%2F%2Fi58.tinypic.com%2F21112 69.png



And the % and other weird characters in that URL, are slashes. They are basically codes for slashes in a URL.