Miscellaneous Hacks - Anti-Leech Attachments - prevent hotlinking and bandwidth theft!

Title : Anti-Leech Attachments

Version : 1.1

Coder : Jason Williams

Purpose : Prevent your forum attachments from being directly linked to - prevent bandwidth abuse.

Why : Bandwidth can be expensive, plus I was frustrated with one of my members linking to three video clips on my forum from his own site, effectively abusing the bandwidth I pay for, so I set about a system that stops hotlinking, but at the same time, as a courtesy, providing a dynamic link to the post containing the attachment.

How : This could be replicated very easily using .htaccess but the one thing that it can't do is give you the link to the attachment itself. This mod displays a message informing the user that hotlinking is not allowed, then giving them the link to the post to view the attachment directly.

Known Issues : The security can be defeated by using the drop down style menu on the Anti Leech page - this has only been confirmed as an issue on Firefox. I have unsucessfully tried to find a way of removing the drop down on that page only.

Confirmed working with vBSEO 3.2.0.

Important : This has been tested on 3.6.2 and 3.8, I can presume it will be compatible with 3.7.x because it works on 3.8 - as always BACKUP FIRST!

Demo : http://www.steadiforum.com/attachmen...9&d=1180779148

Installation :

1. Import Product - product-antileech.xml
2. Save bandwidth!

File uploads : 0
Files to Import : 1
New Templates : 1
New Phrases : 2
Uses Hooks : 1
Uses Queries : 1

History :
v1.0 - Original release

v1.1 - Added enable/disable option, tested on VB 3.8

Done - if you like please click install! (and click Nominate for MOTM!)

[samuelss]

Thanks for the Mod. The options are not showing on my 3.80 also so there must be something somewhere.

Thanks.

[alik4277]

If you can not see option to enable Anti-Leech:

Go to AdminCP -> Plugin & Products -> Plugin Manager -> anti-leech Plugin

Replace all plugin code with

PHP Code:

    $ref = str_replace('http://www.','',$_SERVER['SERVER_NAME']);
    if(!strstr($_SERVER['HTTP_REFERER'],$ref)) {
        $id = $vbulletin->db->fetch_array($vbulletin->db->query_read("SELECT postid FROM ".TABLE_PREFIX."attachment WHERE attachmentid = ".mysql_escape_string($_REQUEST['attachmentid'])));
            eval('$navbar = "' . fetch_template('navbar') . '";');
        eval('print_output("' . fetch_template('antileech') . '");');
        exit;
    } 


Save

[MẪ$T?Я]

it`s nice :up:

will try it

ammm

Important : This has been tested on 3.6.2 and 3.8, I can presume it will be compatible with 3.7.x because it works on 3.8 - as always BACKUP FIRST

backup for database ?

thanks

[YLP1]

Installed and just doing a test run. Woo Hoo! This is awesome!! Works like a charm... cept I still don't have the acp enable/disable to show --- I used the code snippet from a couple of posts abovea and that didn't allow this mod to show up in the vbacp either.

[samuelss]

Originally Posted by alik4277

If you can not see option to enable Anti-Leech:

Go to AdminCP -> Plugin & Products -> Plugin Manager -> anti-leech Plugin

Replace all plugin code with

PHP Code:

    $ref = str_replace('http://www.','',$_SERVER['SERVER_NAME']);
    if(!strstr($_SERVER['HTTP_REFERER'],$ref)) {
        $id = $vbulletin->db->fetch_array($vbulletin->db->query_read("SELECT postid FROM ".TABLE_PREFIX."attachment WHERE attachmentid = ".mysql_escape_string($_REQUEST['attachmentid'])));
            eval('$navbar = "' . fetch_template('navbar') . '";');
        eval('print_output("' . fetch_template('antileech') . '");');
        exit;
    } 


Save

I still cannot see this in my VBulletin Options on 3.8.0 even after i have changed the code as you mentioned above. I also noticed that "if ($vbulletin->options['al_disable'])" is missing from the code you quoted above.

Thanks

[alik4277]

samuelss,
Replace, Save and test it

[samuelss]

Thanks. I have replaced and saved with and without "if ($vbulletin->options['al_disable'])". I have also tried install and uninstall and nothing is still showing.

Thanks.

[alik4277]

You can nothing find.
Replace plugin code with mine code, save and open link to attach-file on new window

[Angel-Wings]

Hmmm - can't this be done already with htaccess ?

Something like:

<FilesMatch "attachment\.php">
RewriteCond %{HTTP_REFERRER} !^http://(www\.)?example.com(/)?.*$ [NC]
RewriteRule .*\.*$ - [F,NC]
</FilesMatch>

And when using the filesystem as storage:

<LocationMatch "/uploads">
RewriteCond %{HTTP_REFERRER} !^http://(www\.)?example.com(/)?.*$ [NC]
RewriteRule .*\.*$ - [F,NC]
</LocationMatch>

Or is there any difference like some additional check ? Reading the addon, if I understand it right you parse HTTP_REFERRER too via PHP, doing it directly via the Server is maybe less portable, but maybe also faster that PHP doesn't need to be called everytime.

[pipin]

Originally Posted by samuelss

Thanks. I have replaced and saved with and without "if ($vbulletin->options['al_disable'])". I have also tried install and uninstall and nothing is still showing.

Thanks.

Same here with 3.8.1

Does not work and no Option in the vB Settings.