Preventing Hotlinking Of Images
Sep 15, 2007
The images I am trying to block are on page generated by a simple PHP script on my server. The offender has replicated what I am doing with ASP on their server. They are hotlinking to my images for the resulting page. They left my website's name on them, so they must think that giving credit is enough.
I'm going to be contacting them to stop but I also want to see if there is a way for me to prevent it from happening in the first place.
I tried mod_rewrite...
Code:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^[url].*$ [NC]
RewriteRule .(gif|jpg)$ - [F]
I know mod_rewrite works on my server because I've been using it for some other things.
However, whenever I enable the above code (add it to the directives and restart apache - have also tried just putting it in a .htaccess file in the appropriate directory), I end up with images still being allowed on my domain and the other domain I'm trying to stop from using my images. Do you think it could have to do with an absent referrer? I read that the code doesn't work if the referrer is blank. What else would cause this not to work? Obviously the domain would have to be correct, but it doesn't block from my domain OR the offending domain.
I tried another method:
Code:
<FilesMatch ".(gif¦jpg¦png)$">
SetEnvIfNoCase Referer ^$ allow_image
SetEnvIfNoCase Referer ^[url] allow_image
Order Deny,Allow
Deny from all
Allow from env=allow_image
</FilesMatch>
This one blocked images to the offending domain, but it also blocked mine!
View 3 Replies
ADVERTISEMENT
May 15, 2007
I've tried a couple of different apps and solutions re hotlinking and IIS w/out finding a real winner. Hoping folks may have some recommendations re apps and/or solutions for dealing w/ hotlinking and IIS 6.
View 0 Replies
View Related
Apr 25, 2005
I am using godaddy hosting, but there is a problem - godaddy allows picture hotlinking by default. So i am loosing a lot of bandwidth.
How can i block this? I have never used .htaccess and don't know how to do it.
View 8 Replies
View Related
Nov 8, 2009
I have found some spammer hotlinking to my images to get his site crawled, I have modified the .htaccess to attempt and serve his hotlinking domain with a warning but it does not work...
My actual .htaccess file is the one below (it was created by wordpress automatically):
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress
I am adding these lines right below:
--------------------------------
RewriteEngine On
RewriteCond %{HTTP_REFERER} ^http://(.+.)?spammerdomain.com/ [NC,OR]
RewriteRule .*.(jpe?g|gif|bmp|png)$ /images/nohotlink.jpe [L]
------------------------------------
My questions...
I dont kmow too much what I am doing, following the tutorial here, http://altlab.com/htaccess_tutorial.html but the problem is that my .htacces already contains something created by wordpress that to me looks like garbage as I don't understand the meaning.
I dont know if I should add the lines inside the <IfModule mod_write.c> or outside them as I have done.
I dont know if it is ok to have two times Rewrite Engine On
PS: When I added the lines I describe above, my site also stopped displaying the images, I had stopped everyone including myself from hotlinking them. I only want to stop certain domain. or even better, my ideal solution is to WHITELIST my domain names (I have two using hotlinkg to those images), but I will settle for blacklist if it is easier.
View 9 Replies
View Related
May 15, 2009
I am looking for a content delivery network that will only serve files to a list of allowed hosts. This is such a basic "doh" feature, but nobody seems to have it (Mosso CloudFiles doesn't have it, and even Amazon S3 has no easy-to-use hotlink protection). Has anyone found such a CDN?
View 10 Replies
View Related
Jul 19, 2009
Is there a way to stop hotlinking? I have a client who has a blog. They have post pics of tattoos. Now there are at least 50 tattoo forums, blogs and other sites hotling to the pics. Now his bandwidth usage has skyrocketed. So enable hotlink protection in his cPanel. Just did a redirect to my main hosting site with a nice please stop hotlink image. Now I see all this in my logs. So I then made a 150 x 9000 clear BG gf with the text at the top please stop hotlinking.
My questions is there any way to stop it. If not should I just make a 1x1 clear gif to redirect to? Also is there a way to not have this traffic show in my log files?
View 4 Replies
View Related
Aug 15, 2008
I'm facing some issues with hotlinking here. the htaccess do not work because users can still use their download manager to download the file without going to my site.
I've seen few sites that got tempoary url that changes every X times and that support download manager.
View 4 Replies
View Related
Aug 5, 2007
I moved my website from one server to another just today and my site has a rank on another website. The ranking site lets me display my rank on my website through a hotlink to their site. When I moved my site to the new server, I can't see the image. On the old server, I could always see the image.
This is a strange issue since in Firefox, I see the image load and then it tells me the image is empty. But when I open the image's URL, I can see it just fine. I've reloaded the page over and over again, but I don't get anything. The same applies to IE.
What's even more strange is when I use a proxy, I can see the image just fine through my browser.
View 4 Replies
View Related
Apr 4, 2007
I'm just wondering what a few good techniques to prevent DDoS would be. What causes them? How can I protect my server against them? I noticed that Apache has something called mod_evasive which helps against them. Does lighttpd have something like this?
View 9 Replies
View Related
Feb 15, 2009
I am a graphic designer/photographer who creates designs for music artists, producers etc. on Myspace (I know, I know). This obviously involves lots of hotlinking, and that is why I am here.
I provide customers with hosting for their layouts so that they don't have to go out and search for one. I am currently hosting the images on a friends private server, but it's fairly slow and I want something more reliable. One layout usually has around 20 different images (background, headers, banners, etc) and I try to make sure it comes out to a little under 1MB, so I don't need to worry that much about disk space. I'd say bandwidth might be the only issue if anything.
I enjoy the work but it's mostly a side business and doesn't create much revenue, so I'm trying to go for around or under $10 a month. That said, I also want to make sure things are fast enough for the visitors and am willing to up the budget if required. I was going to go with 1and1 or Hostgator but heard alot about overselling.
View 12 Replies
View Related
Jun 24, 2008
I have a lot of movie clips on my server i think gets hotlinked. Does anyone knows of a good anti hotlinking movie script?
View 4 Replies
View Related
Jul 22, 2008
Is there a way to prevent a certain service from taking up a certain amount of load on the server?
Like, shouldn't there be a way I can tell gzip or exim how much server load they are allowed to take up on my server?
I know it may run them slower, but it will be for the better if I could set each one to only be able to have a max load peak or something.
View 7 Replies
View Related
Sep 22, 2007
I am currently using IPB as my forum software. I've enabled admin validation only for registrations, to combat the increasing amount of spam signups. I see a lot of .ru and .cn email signups, or other suspicious signups, which I always delete.
What is the best way to combat these spammers?
I've been considering something like WHT uses, that you need X posts before being able to post links, how can I accomplish this with IPB?
View 6 Replies
View Related
Feb 18, 2007
I am running a hosting service. Recently a user put a phishing site on the server, pretending to be an eBay signup page and soliciting passwords. I had all kind of truble with this, because eBay complained to my server company.
I would like to ask if you know any solution what would block such sites automatically?
It could search for some predefined texts on the page (such as "sign in to eBay") and block the page if they are found. I wasn't able to find anything in Apache documentation.
View 6 Replies
View Related
Jan 6, 2007
I have came across site in my statistics that apperantly runs with about 99% of my content flash files. He put adsense all around them, too - sneaky.
I know it is possible to disable hotlinking from other sites using htaccess, but is it possible to disable hotlinking for ONE site? I need to block .swf that come from example.com domain.
View 0 Replies
View Related
Jul 28, 2008
I can't get SELinux to let httpd load the IonCube module for PHP. I've given the CentOS 5 forum a try (here: http://www.centos.org/modules/newbb/...15403&forum=42), talked with WHMCS's support (the app I'm using that needs it), and even opened a ticket with IonCube. Unfortunately nobody seems to know how to tell SELinux to let httpd "exec" modules.
I'm running CentOS 5, and the error I'm getting in /var/log/messages is:
Jul 23 10:15:30 host kernel: audit(1216833330.905:1249): avc: denied { execheap } for pid=22055 comm="httpd" scontext=root:system_r:httpd_t:s0 tcontext=root:system_r:httpd_t:s0 tclass=process
I can disable SELinux and it works fine (setenforce 0), but that's not the solution I'm looking for. Can someone please tell me how to do this the *right* way?
View 11 Replies
View Related
Jun 5, 2014
PRODUCT, VERSION, MICROUPDATE, OPERATING SYSTEM, ARCHITECTURE
Plesk Panel 11.5.30#46
Centos 6.5
AuthenticAMD, AMD Opteron(TM) Processor 6272
PROBLEM DESCRIPTION
Upon a shutdown or reboot, the system shuts down sw-collectd. Further along, it will end wdcollect and the following will occur:
init: psa-wdcollect main process (pid) killed by KILL signal
init: psa-wdcollect main process ended, respawning
wdcollect[pid]: Language en-US is used for sending e-mail messages.
wdcollect[pid]: Failed to connect to database server during the startup. New attempts will be made if needed.
wdcollect[pid]: Server started
I believe this is preventing the un-mounting of drives which in the end freezes the shutdown process on:
Please stand by while rebooting the system...
After this occurs, I have to force the VM off and then boot again.
I have tried the following:[URL] .....
View 1 Replies
View Related
May 5, 2008
im currently looking for a mod that can cloak the real url adress to prevent hotlinking and havetempoary links which expires after x min and a new linkupdates
View 2 Replies
View Related
Jun 20, 2008
I am currently installing lxadmin in my webserver, but during the intallation i received a alert message from my "settroubleshootebrowser" saying:
SummarySELinux is preventing /usr/local/lxlabs/ext/php/php from loading /usr/local/lxlabs/ext/php/lib/mysql.so which requires text relocation.
Allowing AccessIf you trust:
/usr/local/lxlabs/ext/php/lib/mysql.so to run correctly, you can change the file context to textrel_shlib_t. "chcon -t textrel_shlib_t /usr/local/lxlabs/ext/php/lib/mysql.so"The following command will allow this access:chcon -t textrel_shlib_t /usr/local/lxlabs/ext/php/lib/mysql.so
This message was for thwe SQL and Zend optimizer.
My Question is, where do i find the "chcon -t textrel_shlib_t" file allow access?
View 3 Replies
View Related
Jul 28, 2009
I'm trying to do is wget images, however, i'm not sure how to do it 100% right...
what ive got is a index.html page that has images(thmubs) that link to the full size images. how do i grab the full size images?
Example of links on the page:
<a href="images/*random numbers*.jpg" target="_blank"><img border=0 width=112 height=150 src="images/tn_*random numbers*.jpg" style="position:relative;left:3px;top:3px" /></a>
i tried
wget -A.jpg -r -l1 -np URLHERE
View 1 Replies
View Related
Mar 2, 2008
Has anyone here gotten any of the Xen images from jailtime.org to work on CentOS? I've figured out what the heck I'm doing since my last question [url], but they still won't boot. And the more I Google it, the more people I find asking the same questions.
It looks like they're depending on a bunch of non-standard images in their initrd, and, unless we have some of these unknown modules, the darned thing won't boot. Mine ends up failing like this:
Code:
NET: Registered protocol family 1
NET: Registered protocol family 17
Using IPI No-Shortcut mode
XENBUS: Device with no driver: device/vbd/2049
XENBUS: Device with no driver: device/vbd/2050
XENBUS: Device with no driver: device/vif/0
md: Autodetecting RAID arrays.
md: autorun ...
md: ... autorun DONE.
VFS: Cannot open root device "sda1" or unknown-block(0,0)
Please append a correct "root=" boot option
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
The xen.conf for this particular VM:
Code:
# This points ta real Dom0 kernel!
kernel = "/boot/vmlinuz-2.6.18-53.1.13.el5xen"
memory = "256"
name = "Ubuntu-Matt"
vif = [ 'mac=00:01:02:03:04:07, bridge=xenbr0, vifname=vif1.0' ]
# Set the disk...
disk = ['file:/home/matt/vms/ubuntu-7.04/ubuntu.7-04.img,sda1,w', 'file://home/matt/vms/ubuntu-7.04/ubuntu.swap,sda2,w']
root = "/dev/sda1 ro"
This is driving me bonkers... Has anyone gotten these to work? Would I be better off just installing from an ISO?
View 0 Replies
View Related
Sep 5, 2008
I have uploaded my site through FTP. Everything seems to be showing except the /images files.
Images in .gif and .jpg ain't showing up. The error I get is
"The image "image URL" cannot be displaying, because it contains error"
It's weird because the image is uploaded on the ftp in images folder but for some weird reason it's not showing up.
View 6 Replies
View Related
Jun 18, 2009
how to have full size images in my DH (dreamhost) gallery2?
View 2 Replies
View Related
Aug 13, 2008
I plan to build huge image gallery, using lighttpd to server these images. It would be easiest for me to have all these files (more than 1 000 000) in one directory? Is it ok?
I have no idea, if this can cause any problems. Should I part my files into several directories, does it make serving better/faster?
View 14 Replies
View Related
Nov 21, 2008
Dose more images mean more RAM usage?
Do images take a heavy load on server RAM?
View 5 Replies
View Related
Mar 1, 2008
I have virtual folder in IIS6 which has asp file as default and several jpg files. How to prevent JPG files download from server? I want to let execute asp file only and do not let users download jpg files.
View 0 Replies
View Related
Dec 4, 2008
How to hotlink images in forum?
View 2 Replies
View Related
May 28, 2007
I am creating a web application, nothing spectacular just something to display content.
After completing a long night of coding, I uploaded my files to my server and checked to make sure everything was functioning correctly. Everything seemed fine so I went to bed.
The next morning, to my surprise, all my images had dissapeared! Well not all of them, just the ones being displayed through the PHP script. (coincidentally, these images where all in the same directory...)
Of course the first thought that went through my mind was "scripting error". Which surprised me, since everything worked perfectly the night before. I checked and double checked everything, and I couldn't find anything wrong. I checked the permissions on the directory holding the images and they appeared correct (755). So, to locate the problem I decided to strip out all the variables and create a test page that had only the SQL query, and a print to output the <img> code. Still nothing! So I decided to just go the HTML route and create a test file that held only the <img> code, no PHP involved... nothing.
The images are on the server. I double checked... if you right click > view image, it shows up. Then if you go back to the "test" page and refresh the image is there... however, it does not appear when you first load the page, or it appears and then immediately dissapears.
I contacted my host about the issue, and their first response said:
Quote:
Dear customer,
The images are there if you login through plesk control panel and go to
File Manager under your domain you can find the pictures and see
them.But some of them are not opening under your website.
Best Regards
Honestly... are you kidding me? Reiterating my question doesn't constitute as an answer. And they call themselves "engineers"...
Seeing as it appears to only be affecting one directory (and possibly only JPG images...? Have a look at the test pages above), I believe it might be a permissions issue.
View 0 Replies
View Related