attachements.php ?

[etones]

Is there a simple way to make sure that attachments stored in the DB cant be hot linked by extrernal sites?

Secondly, is there a hack that will only allow you to se an attachment if you are a registed member?

Cheers,
Taz

[Chris M]

@etones - Just set the attachments to "display a link to the attachment", then set Guest viewing permissions "can download attachments" to NO...

As for the attachments protection :

Open up attachment.php (root folder)

Find :

PHP Code:

<?php

add after it

PHP Code:

$referers = array ('www.yoursite.com','yoursite.com','123.456.7.8'); 

function check_referer($referers){ 
   if (count($referers)){ 
      $found = false; 
      $temp = explode('/',getenv("HTTP_REFERER")); 
      $referer = $temp[2]; 
      for ($x=0; $x < count($referers); $x++){ 
         if (ereg ($referers[$x], $referer)) { 
            $found = true; 
         } 
      } 
      if (!$found){ 
      exit;
      } 
         return $found; 
      } else { 
         return true;
   } 
} 

check_referer($referers); 


Change "yoursite.com", "www.yoursite.com", and "123.456.7.8" to the proper values

123.456.7.8 = your site's IP address

You can also do the same for avatar.php, if you dont want them to be able to view your avatars off your site

i.e.

My Profile with Avatar <- Viewing from my site

http://www.darkblazes.com/forums/ava...ine=1034425026 <- My avatar - Cant view it

Satan

[etones]

nice one hellsatan, appreciate that one!

Cheers,
Taz

[Chris M]

No probs

I found this a while back on vB.org myself - Its very useful

Satan