vb.org Archive - Hot linking blocking in attatchment.php?

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Modification Requests/Questions (Unpaid) (https://vborg.vbsupport.ru/forumdisplay.php?f=112)

- - Hot linking blocking in attatchment.php? (https://vborg.vbsupport.ru/showthread.php?t=66703)

krohnathlonman

06-30-2004 03:12 AM

Hot linking blocking in attatchment.php?

I've been thinking about looking into this... If anybodies already done it please hook me up with it :) I've been using the VB attatchment system for all of my articles and now the article images are getting hotlinked fairly often.

Zachery

06-30-2004 03:45 AM

Quote:

Originally Posted by krohnathlonman

I think the simpilest thing to do is not allow guests to view attachments

alan92rttt

07-06-2004 03:48 AM

PHP Code:


		
			
$url=parse_url($HTTP_REFERER);

if(!empty($url["host"])&&strpos($url["host"],'vbulletin.org')==0){

    echo "Error 500-invalid server call - ".$url["host"]." - Remote linking Denied";

    exit;

}

Just change vbulletin.org to your site.

This only works of the browser is providing referer.

Then echo can be totally removed.

Andreas

07-06-2004 03:52 AM

@alan92rttt
This will not work, as the user can set the referrer to any value he wants.

Jolten

07-06-2004 03:56 AM

Quote:

Originally Posted by Zachery

I think the simpilest thing to do is not allow guests to view attachments

True.. but not always possible. My site is geared towards guests seeing images, letting them hot link is another matter.

.htaccess does a pretty good job though.

dstruct2k

07-06-2004 06:19 AM

Quote:

Originally Posted by KirbyDE

@alan92rttt
This will not work, as the user can set the referrer to any value he wants.

How desperate are people getting if they're altering their referrer just to see one image?

eoc_Jason

07-08-2004 01:58 AM

Using a .htaccess file to prevent hotlinking works on the same principle as the code posted above. Because of the session-less design of HTTP, there are really only 2 ways you can prevent hotlinking. 1 - referrer url or 2 - user authentication.

JBMoney

09-28-2004 08:39 PM

.htaccess won't protect attachments though, will it? It won't keep someone from using a img src tag to post an attachment from your Forum to where ever they want to. How can that be done?

All times are GMT. The time now is 06:19 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01687 seconds Memory Usage 1,726KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_php_printable (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (8)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: