vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 2.x Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=4)
-   -   Stop Users from Cross-linking Attachments (https://vborg.vbsupport.ru/showthread.php?t=35399)

Savant 01-14-2003 12:11 AM

test
http://www.procreatica.com/forum/att....php?postid=88

Link14716 02-05-2003 10:11 PM

Beautiful. :)

[high]* Link14716 installs. :)
[/high]

http://www.vggmn.com/forums/attachme...?s=&postid=148

Sweet Cheeks 02-10-2003 01:26 PM

Very cool, works great on 2.2.9 :banana:

Sweet Cheeks 02-10-2003 06:03 PM

Ack!!! Could this be due to Firewalls people have installed on their machines? :paranoid:


So far I have had 3 users that are getting the replacement image (the one that says you arent supposed to link outside the site) on the avatar areas and for anything that is attached

This is very strange, any ideas? Here's the entire code I am using:





// Cross-link hack by Guru 2/24/2002
// Check that we aren't linked somewhere else
$url = parse_url($HTTP_REFERER);
$checkurl = strtolower($url["host"]);
if (! strstr($checkurl, "belliesandbabies.com")) {

// Remove this code if you just want to break the image
// Substitute my Logo
header("Content-Type: image/gif");
$filename = "http://www.belliesandbabies.com/bandwidtherror.gif";
$image = fread(fopen($filename,"r"),100000);
echo $image;
fclose($image);
// End Substitute my Logo

exit;
}

zootsuit 02-11-2003 01:56 AM

test

http://www.talkhardonline.com/forum/...p?postid=97785

zootsuit 02-11-2003 01:57 AM

sweet.

:)

Guru 02-11-2003 02:27 AM

Quote:

Originally posted by ~*Julie*~
Ack!!! Could this be due to Firewalls people have installed on their machines? :paranoid:


So far I have had 3 users that are getting the replacement image (the one that says you arent supposed to link outside the site) on the avatar areas and for anything that is attached

This is very strange, any ideas? Here's the entire code I am using:
<snip>

As far as I can determine, this happens with IE 6.0 users only. And, it may be fixed in a service pack. I think it's because this version of IE doesn't submit the "REFERER" header correctly. Does anyone know the answer?

Sweet Cheeks 02-11-2003 10:06 AM

Quote:

Originally posted by Guru


As far as I can determine, this happens with IE 6.0 users only. And, it may be fixed in a service pack. I think it's because this version of IE doesn't submit the "REFERER" header correctly. Does anyone know the answer?

We troubleshooted this and anyone on my site using the Norton Firewall had to disable the "Script Blocking" part of the firewall, now everything is working great : :)

Francis96se 02-19-2003 06:49 PM

test

http://www.houston-imports.com/forum...=&postid=94489

Gutspiller 03-15-2003 02:42 AM

I can't get this to work, can somebody give me the exact code if my website were http://www.TheForumz.com and my image was in http://www.TheForumz.com/images/bandwidth_stealer.gif

Spike05 03-21-2003 08:24 AM

It doesn't work for me! I had to add more that one domain! With one domain there are no Problems! Can you help me??

cu

Jochen

laycomp 03-29-2003 04:23 PM

Greets!

Does this hack work .rar, .zip and other binary attachments?

Thanks!

Gutspiller 05-14-2003 12:53 AM

How do I add multiple domains?

I tried this

if ((false === strpos($checkurl, "firstdomain") ||
(false === strpos($checkurl, "seconddomain") ||
(false === strpos($checkurl, "thirddomain")) {

like was said in previous posts in this thread, but it didn't work. Can somebody help me with how I would add more domains to be allowed?

Many thanks!

Guru 05-14-2003 01:31 AM

You would want to check that ALL domain possibilities are false, so substitute "&&" for the "||" This will require ALL the domain checks to return false, which is what you want in this case.

Guru 05-14-2003 01:32 AM

Quote:

03-29-03 at 11:23 AM laycomp said this in Post #92
Greets!


Does this hack work .rar, .zip and other binary attachments?

Thanks!

There is no file-specific code, so it should work for anything you can attach.

DeeperImage 05-14-2003 05:01 AM

It works for me, but it also blocks my own site members from viewing attachments.. Can someone help me.. I am taking out the code for another image, just breaking up the image with the exit line. Help.. But it does work, i checked the sites where my members link to and the image was a red ex. But it also blocks my own site.. thanksl.

Guru 05-14-2003 01:35 PM

On my site, some users have problems if their security settings block the "HTTP-REFERER" header that this hack depends on. Try lowering your own security settings to see if that fixes it.

It might be time to redesign or revise this hack to work better with newer browsers and vB?

DeeperImage 05-21-2003 05:20 PM

Quote:

05-14-03 at 10:35 AM Guru said this in Post #97
On my site, some users have problems if their security settings block the "HTTP-REFERER" header that this hack depends on. Try lowering your own security settings to see if that fixes it.

It might be time to redesign or revise this hack to work better with newer browsers and vB?


Agreed. I tried the security settings and it made no diff.. :(

Dioxin 09-17-2003 03:20 PM

test

http://www.aktienboard.com/vb/attach...?postid=730662

test

Merlin_ 03-26-2004 06:06 AM

This should work with vB 3.0. Put the same code in attachment.php.

lifesourcerec 06-07-2004 06:59 PM

Will this be available in vB3?

Esdee 09-17-2004 07:15 PM

test

http://www.sephirothsfollowers.com/f...p?postid=17627


I only seem to get error messages...
Vb2.3.5
Linux Servers
Ie 6.somethin...

s?dpol 12-31-2004 12:05 AM

Hi greate Hack!

is it possible to use this hack with https connection from a 2nd domain listed in the if condition? I don't know if https sends a usefull Referer...

Regards

Thomas P 06-21-2006 10:57 PM

Does this work for vB 3.5.x?

PrinzEmu 10-02-2006 12:29 PM

works fine with 3.6.1


All times are GMT. The time now is 09:21 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01382 seconds
  • Memory Usage 1,766KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (4)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (25)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete