Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
Reload this Page Attachment.php hotlinking
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 02-10-2005, 02:37 PM
GlitterKill GlitterKill is offline
 
Join Date: Jul 2002
Location: Nashville
Posts: 139
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Attachment.php hotlinking
How can I keep people from hotlinking to attachments? I already stop hotlinks for images. I cannot simply add php to the set since it will prevent people from linking to our article which are php as well.

Any ideas how to keep attachment.php specifically from being hotlinking from outside the domain?

I figured it out... here is the code I used in .htaccess to prevent hotlinking for attachment.php and avatar.php

Code:
<FilesMatch "attachment\.php">
        ErrorDocument 403 http://mydomain.com/sorry.gif
        SetEnvIf Referer "^http://www\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://pimprig\.com" good_referal
        SetEnvIf Referer "^http://forums\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://gallery\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://links\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://reviews\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://guides\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://systems\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://articles\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://news\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://team\.pimprig\.com" good_referal
        SetEnvIf Referer "^$" good_referal

        Order Deny,Allow
        Deny from all
        Allow from env=good_referal
</FilesMatch>
<FilesMatch "avatar\.php">
        ErrorDocument 403 http://mydomain.com/sorry.gif
        SetEnvIf Referer "^http://www\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://pimprig\.com" good_referal
        SetEnvIf Referer "^http://forums\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://gallery\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://links\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://reviews\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://guides\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://systems\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://articles\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://news\.pimprig\.com" good_referal
        SetEnvIf Referer "^http://team\.pimprig\.com" good_referal
        SetEnvIf Referer "^$" good_referal

        Order Deny,Allow
        Deny from all
        Allow from env=good_referal
</FilesMatch>
Reply With Quote
  #2  
Old 02-10-2005, 11:00 PM
shiva shiva is offline
 
Join Date: Apr 2002
Posts: 158
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Looks interesting, but a little confused. how would this affect the existing htaccess, could you just add this with the other code? Other question is I'm pretty new to this type of code, and I don't use subdomains, so would my code be instead of this:

Code:
SetEnvIf Referer "^http://forums\.pimprig\.com" good_referal
it would be this? :

Code:
SetEnvIf Referer "^http://www\.pimprig\.com\.forums" good_referal
SetEnvIf Referer "^http://pimprig\.com\.forums" good_referal
Reply With Quote
  #3  
Old 02-10-2005, 11:04 PM
noppid noppid is offline
 
Join Date: Mar 2003
Location: Florida
Posts: 1,875
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Maybe just turn off attachments for guests?
Reply With Quote
  #4  
Old 02-10-2005, 11:26 PM
Zachery's Avatar
Zachery Zachery is offline
 
Join Date: Jul 2002
Location: Ontario, Canada
Posts: 11,440
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by noppid
Maybe just turn off attachments for guests?
Send them a HUGE 1600x1600 clear gif file (about 2.83k )
Reply With Quote
  #5  
Old 02-11-2005, 12:05 AM
noppid noppid is offline
 
Join Date: Mar 2003
Location: Florida
Posts: 1,875
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by Zachery
Send them a HUGE 1600x1600 clear gif file (about 2.83k )
Very creative.
Reply With Quote
  #6  
Old 02-11-2005, 12:24 AM
Zachery's Avatar
Zachery Zachery is offline
 
Join Date: Jul 2002
Location: Ontario, Canada
Posts: 11,440
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by noppid
Very creative.
I can't be all good now can i >D
Reply With Quote
  #7  
Old 02-11-2005, 02:29 PM
GlitterKill GlitterKill is offline
 
Join Date: Jul 2002
Location: Nashville
Posts: 139
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
It should work fine with yoru other .htaccess code. Just add this at the bottom.

If you dont haev subdomains just delete the lines you dont need and change "pimprig" to your own subdomain.
Reply With Quote
  #8  
Old 02-11-2005, 03:58 PM
T3MEDIA T3MEDIA is offline
 
Join Date: Dec 2004
Posts: 944
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
is this placed in the root or in the forum folder where the php files are? This is onething I was never sure on.
Reply With Quote
  #9  
Old 02-12-2005, 11:35 AM
GlitterKill GlitterKill is offline
 
Join Date: Jul 2002
Location: Nashville
Posts: 139
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
YOu can place it in the root web folder or the forums folder. Try it one way then test to make sure it's working.
Reply With Quote
  #10  
Old 02-25-2005, 10:43 PM
clearchannel clearchannel is offline
 
Join Date: Nov 2001
Location: Ft Lauderdale, Florida
Posts: 100
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Would someone be so kind as to point out where I would place the code above. This is what my current htaccess looks like:

Code:
Options ExecCGI FollowSymLinks Includes
DirectoryIndex index.php index.htm index.html
AddHandler cgi-script .cgi
AddType application/x-httpd-cgi .cgi

<Limit GET>
order allow,deny
allow from all

deny from xxx.xxx.xx.x
deny from xxx.xxx.xx.xx

[/limit]
Thanks in advance.
Reply With Quote
Reply

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 11:42 PM.

Contact Us - Archive - Top

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.10365 seconds
  • Memory Usage 2,255KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (4)bbcode_code
  • (3)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 
Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete