vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Everyone of Your Photos Albums Are Open to Hot Linking (https://vborg.vbsupport.ru/showthread.php?t=220288)

BarelyHangingOn 08-06-2009 01:30 AM

Everyone of Your Photos Albums Are Open to Hot Linking
 
Unless somebody has a method to protect but I just went through google and hot linked photos from the about 10 VBulls using the plugin to display photo album images on the front page.

Any thoughts? Any solutions? Why would VBull not address this flaw? There have been numerous posts on this board and the official board without any solution that I can see.

1Unreal 08-06-2009 04:11 AM

Thats up to you not vB. And there are hundreds of tutorials on protecting your site from hotlinking.

BarelyHangingOn 08-06-2009 07:58 AM

Wow, Google has information of hot link protection? I didn't know that.

Now, for the rest of the people that know something about VBulletin.

They have decided to call image requests from Photo Albums not like normal image requests but like this: /board/picture.php?albumid=3&pictureid=52

How do you block that through htaccess. I found tons of requests on this board and the official board and there was not one response from VBull on how to help with this situation.

It's not up to me, it's to them since they decided to call the images in such an off centred way. It's the same with attachments which can be totally hotlinked.

1Unreal, if you are on top of it. Then what is the code to prevent hot linking of images in photo albums?

1Unreal 08-06-2009 08:05 AM

Depends how the images are being stored. In the database or as files. Storing them as files would make them easier to protect.

BarelyHangingOn 08-06-2009 08:11 AM

There is no difference between how how the software calls them. I have switched it between files and database and it still handles them the same way.

1Unreal 08-06-2009 08:52 AM

No it doesn't.

BarelyHangingOn 08-06-2009 10:26 AM

I have just switched it between the three storage types and the address given for all of the photos is:
/board/picture.php?albumid=3&pictureid=53

This seems to contradict your "no it doesn't"

http://www.vbulletin.com/forum/showt...picture.php%3F

Lynne 08-06-2009 01:58 PM

If you store the album images in the file system, and put that directory above your public_html folder (just like the attachment folder and just as recommended), then you should not be able to see them if they are linked on another site (unless the person viewing them is also a member of the site and has the correct permissions to view them). If you want to do the same with thumbnails, I think there is some option to disallow publicly linking to them.

BarelyHangingOn 08-06-2009 02:49 PM

Thank you Lynn can you give me an exmaple of the path to the folder in setup if I called it "album". I am having problems as it won't write to the folde which I have 777 permisions on.

Example

/domains/mydomain.com/album ???

My board is located at
/domains/mydomain.com/public_html/board

Lynne 08-06-2009 03:11 PM

From what you wrote above, I'm guessing that /domains/mydomain.com/album would be fine.

You might want to see this - Album Picture Storage Type and this - When Pictures are in the Database and this - When Pictures are in the File System


All times are GMT. The time now is 03:18 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01119 seconds
  • Memory Usage 1,729KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete