Attachment and avatar hotlinking protection (1.0.1)

Support in this thread or by email (preferrably thread)

vBulletin 2.2.x (tested on 2.2.9)

Prevents people from linking to attachments and custom avatars on your forum from other sites.

Example:
Attachment hotlinking protection: Click and watch the redirection message. You are then taken straight to the post containing the attachment.

Custom avatar hotlinking protection: Click and watch the redirection message again. This time you are taken to the user's profile.

When the attachment is linked to via an img tag, it is shown as a red x in IE, or a torn paper in Mozilla.

Modifications:
2 file modifications
/forum/attachment.php
/forum/avatar.php
1 new template
redirect_wrongreferrer

Updates since 1.0:
Added custom avatar hotlinking protection

Modifications since last version:
2 file modifications
/forum/attachment.php
/forum/avatar.php
1 template modification
redirect_wrongreferrer

For upgrade instructions see the text file.

Note for people who have problems getting the avatar hotlinking protection to work: Try this code in the avatar.php modification instead of mine

[Schorsch]

just installed, works fine.

Thanks

[w596]

Yes you did see that... I posted the question early this morning but found what I was looking for in another thread, then deleted my post. Sorry about that. lol

[N9ne]

I believe the same code can be used for avatar.php to protect avatars

[fury]

Yes, I think I will add that to the hack.

[fury]

Hack has been updated to include custom avatar hotlinking protection. See the first post for info, or grab the text file for upgrade instructions

[nuno]

No joy fury
Apache test log file

[Fri Jan 03 10:43:59 2003] [error] PHP Notice:  Undefined index:  HTTP_REFERER in c:\apache\htdocs\avatar.php on line 6
[Fri Jan 03 10:43:59 2003] [error] PHP Notice:  Use of undefined constant host - assumed 'host' in c:\apache\htdocs\avatar.php on line 8
[Fri Jan 03 10:43:59 2003] [error] PHP Notice:  Undefined index:  host in c:\apache\htdocs\avatar.php on line 8

[fury]

Weird...

Does the attachment hotlinking protection work on the same server?

You got an MSN messenger addy I can contact you at? If not, just send me your avatar.php to dennis@xibase.com and I'll take a look at it

[nuno]

fury, the avatar hotlinking is not working at otcentral as well, after the redirect message you get kicked to profile page and the avatar is broken.
Check your log files.

[nuno]

Attachment hotlinking is working flawlessly, so it went to live forums.
Avatar hotlinking is being tested at localhost.

[fury]

Avatar hotlinking seems to be working fine for me on both localhost and live server...

Try this: Move this line

set_magic_quotes_runtime(0);

to just above

$c_url = parse_url($GLOBALS[HTTP_REFERER]);