Home Private Messages Search
CPG Dragonfly™ CMS Dedicated Server & Bandwidth Sponsored by DedicatedNOW
Toggle Content
 
Forums ⇒ CMS (All) ⇒ Security :: Archives ⇒ help with someone hotlinking images on my site :: Archived


help with someone hotlinking images on my site :: Archived
Post any security related questions in here.
Please send discovered reports to security @ cpgnuke.com
Do Not post links to exploits or hacker sites - your post will be edited/deleted.
If you think you've been hacked, FIRST go through your server logs.

Go to page 1, 2  Next
Post new topic    Revive this topic    Printer Friendly Page     Forum Index ⇒  Security

Topic Archived View previous topic :: View next topic  
Author Message
djdevon3
Gold Supporter
Gold Supporter

Offline Offline
Joined: Aug 05, 2004
Posts: 4363

PostPosted: Wed Sep 21, 2005 5:17 pm
Post subject: help with someone hotlinking images on my site

i've got a little problem now with someone hotlinking to my babe of the day pics without permission. they've also ripped off the credits for just about everything on their site (e107). the site being egg-nog.com

i'm hosting the images out of /images/babes and have tried adding an htaccess file in there. i can't seem to get it right using all the posts here about hotlinking and ip denials. i always either shut off all the images on my own site lol or have it so that my botd image isn't showing. i only want that one site or any future sites that might come up to be blocked from hotlinking to my babe of the day pics.

i would still like for hotlinking to be on because i use it for remote avatars and forum signatures and things like that. i just don't take too kindly to people that hotlink without asking.


djdevon3's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.33/4.4/4.3.11
Back to top
View user's profile Visit poster's website Photo Gallery
tour93
Gold Supporter
Gold Supporter

Offline Offline
Joined: Apr 20, 2004
Posts: 526
Location: florida
PostPosted: Wed Sep 21, 2005 5:48 pm
Post subject: Re: help with someone hotlinking images on my site

try that:
www.webmasterworld.com...92/272.htm Rolling Eyes

_________________



tour93's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.39/4.1.22/4.4.7/Dragonfly9.1.2.1
Back to top
View user's profile Visit poster's website MSN Messenger
MrPotatoes
Dragonfly addicted
Dragonfly addicted

Offline Offline
Joined: Apr 23, 2005
Posts: 403
Location: Florida
PostPosted: Wed Sep 21, 2005 5:55 pm
Post subject: Re: help with someone hotlinking images on my site

you have to pay to go there Sad

_________________
i'm just that sweet

MrPotatoes's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Windows XP | P4HT 3.4| 1.5GB RAM | 256 Vid Card PCIX | Apache2.0.52 | MySQL 1.4.8 | PHP 4.3.10 | 9.03
Back to top
View user's profile Visit poster's website
WebSiteGuru
1000+ Posts Club
1000+ Posts Club

Offline Offline
Joined: Jun 09, 2005
Posts: 2318

PostPosted: Wed Sep 21, 2005 7:41 pm
Post subject: Re: help with someone hotlinking images on my site

I found this in one of the forum. Maybe you can use it.

Quote::

I have been playing around (read: learning) with .htaccess, trying to prevent image hotlinking by other sites.
When I place .htaccess in the www-directory of my website (www.middenschool-ninove.be) and enter

Options -Indexes

in it, then this does result in not being able to list a directory while surfing to a folder. This indicates to me that .htaccess is processed properly.
However, when I add

RewriteEngine on
RewriteCond %{HTTP_HOST} !^$
RewriteCond %{HTTP_HOST} !.*middenschool.* [NC]
RewriteRule \.(gif|jpe?g|png)$ - [F,NC,L]

to it, it doesn't seem to have any effect on preventing other sites to hotlink to my images. I had uploaded a page with a hotlink on another website, but it still shows my picture.

Is the use of RewriteEngine supported by the way PHP is installed by SpeedPacket, or is there any syntax error in the above lines that prevent the RewriteRule from being applied?

I can block all images on my own site (middenschool-ninove.be) by using
RewriteEngine on
RewriteCond %{HTTP_HOST} !^$
RewriteCond %{HTTP_HOST} .*middenschool.* [NC]
RewriteRule \.(gif|jpe?g|png)$ - [F,NC,L]

(note that the middenschool-line has the not (!) left out now). This effectively shows NO images on my website. By putting ! back into the RewriteCond line, I restore my images, but they are also shown by other website that have a hotlink to them.

Is anybody more experienced in this matter? Any suggestion is welcome.

_________________
Lead Theme Designer - WebSiteGuru Designs

WebSiteGuru's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux 2.6.9 / Apache 2.2.6 / MySQL 5.0.27 / PHP 5 / DF Version 9.2.1
Back to top
View user's profile Visit poster's website Yahoo Messenger
tour93
Gold Supporter
Gold Supporter

Offline Offline
Joined: Apr 20, 2004
Posts: 526
Location: florida
PostPosted: Wed Sep 21, 2005 8:17 pm
Post subject: Re: help with someone hotlinking images on my site

MrPotatoes wrote:
you have to pay to go there Sad
That's funny I went there through Google I didn't have any problem.
Anyway use Google search

_________________



tour93's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.39/4.1.22/4.4.7/Dragonfly9.1.2.1
Back to top
View user's profile Visit poster's website MSN Messenger
WebSiteGuru
1000+ Posts Club
1000+ Posts Club

Offline Offline
Joined: Jun 09, 2005
Posts: 2318

PostPosted: Wed Sep 21, 2005 8:20 pm
Post subject: Re: help with someone hotlinking images on my site

tour93 wrote:
MrPotatoes wrote:
you have to pay to go there Sad
That's funny I went there through Google I didn't have any problem.
Anyway use Google search

I seem to see the samething that MrPotatos see.

_________________
Lead Theme Designer - WebSiteGuru Designs

WebSiteGuru's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux 2.6.9 / Apache 2.2.6 / MySQL 5.0.27 / PHP 5 / DF Version 9.2.1
Back to top
View user's profile Visit poster's website Yahoo Messenger
tour93
Gold Supporter
Gold Supporter

Offline Offline
Joined: Apr 20, 2004
Posts: 526
Location: florida
PostPosted: Wed Sep 21, 2005 8:20 pm
Post subject: Re: help with someone hotlinking images on my site

Google search : hotlinking webmasterworld

I think WebSGuru found it

_________________



tour93's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.39/4.1.22/4.4.7/Dragonfly9.1.2.1
Back to top
View user's profile Visit poster's website MSN Messenger
WebSiteGuru
1000+ Posts Club
1000+ Posts Club

Offline Offline
Joined: Jun 09, 2005
Posts: 2318

PostPosted: Wed Sep 21, 2005 8:33 pm
Post subject: Re: help with someone hotlinking images on my site

Also this is a good Tutorials too on .htaccess.

www.freewebmasterhelp..../htaccess/

_________________
Lead Theme Designer - WebSiteGuru Designs

WebSiteGuru's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux 2.6.9 / Apache 2.2.6 / MySQL 5.0.27 / PHP 5 / DF Version 9.2.1
Back to top
View user's profile Visit poster's website Yahoo Messenger
djdevon3
Gold Supporter
Gold Supporter

Offline Offline
Joined: Aug 05, 2004
Posts: 4363

PostPosted: Thu Sep 22, 2005 12:52 am
Post subject: Re: help with someone hotlinking images on my site

oh geeez. i was putting in their url for the rewrite condition instead of my own. lol.

got it working Smile

now how to direct the image for them to the hunk of the day lol hmmm.


djdevon3's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.33/4.4/4.3.11
Back to top
View user's profile Visit poster's website Photo Gallery
Phoenix
• Many Posts •
• Many Posts •

Offline Offline
Joined: Apr 19, 2004
Posts: 8799
Location: Netizen
PostPosted: Thu Sep 22, 2005 12:59 am
Post subject: Re: help with someone hotlinking images on my site

There are several posts in the old 8.x forums on this subject.

Beware, if you have and use the CPanel option, it may overwrite your existinbg htaccess file.

_________________
DonationsPro for DragonflyCMS, SMF, MyBB, vBulletin

Phoenix's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Back to top
View user's profile Visit poster's website Photo Gallery
djdevon3
Gold Supporter
Gold Supporter

Offline Offline
Joined: Aug 05, 2004
Posts: 4363

PostPosted: Thu Sep 22, 2005 1:06 am
Post subject: Re: help with someone hotlinking images on my site

oh and that last link websiteguru posted helped a ton. i recommend that link.


djdevon3's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.33/4.4/4.3.11
Back to top
View user's profile Visit poster's website Photo Gallery
djdevon3
Gold Supporter
Gold Supporter

Offline Offline
Joined: Aug 05, 2004
Posts: 4363

PostPosted: Thu Sep 22, 2005 1:08 am
Post subject: Re: help with someone hotlinking images on my site

yeah i read that from an earlier thread phoenix, and i've been through all of those old posts too. i'm not ever going to use cpanel for htaccess. i did use the hotlink protection in cpanel and it didn't overwrite the file it just added to it. i didn't try the htaccess editor though.


djdevon3's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.33/4.4/4.3.11
Back to top
View user's profile Visit poster's website Photo Gallery
djdevon3
Gold Supporter
Gold Supporter

Offline Offline
Joined: Aug 05, 2004
Posts: 4363

PostPosted: Thu Sep 22, 2005 1:35 am
Post subject: Re: help with someone hotlinking images on my site

it doesn't look like i can create a redirect from a certain url. such as
if from www.badhotlinker.com
redirect www.ratemypoo.com/

anyone have an idea of how to do that?


djdevon3's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.33/4.4/4.3.11
Back to top
View user's profile Visit poster's website Photo Gallery
Phoenix
• Many Posts •
• Many Posts •

Offline Offline
Joined: Apr 19, 2004
Posts: 8799
Location: Netizen
PostPosted: Thu Sep 22, 2005 1:37 am
Post subject: Re: help with someone hotlinking images on my site

Just be careful that you don't redirect to a real site - it's illegal. This may work,
Quote::
RewriteEngine On
RewriteCond %{HTTP_REFERER} !^$ [NC]
RewriteCond %{HTTP_REFERER} !^http://yoursite.com [NC]
RewriteCond %{HTTP_REFERER} !^http://www.yoursite.com [NC]
RewriteCond %{HTTP_REFERER} !^http://youripaddress [NC]
RewriteRule ^.*$ www.yoursite.com/ [R,L]
Will redirect to you if the link doesn't come from you - use with EXTREME caution.

I've moved this to the Security forum, as I have with some previous topics.

_________________
DonationsPro for DragonflyCMS, SMF, MyBB, vBulletin

Phoenix's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Back to top
View user's profile Visit poster's website Photo Gallery
tattoohead
Nice poster
Nice poster

Offline Offline
Joined: Jul 30, 2005
Posts: 51

PostPosted: Sat Sep 24, 2005 9:19 am
Post subject: Re: help with someone hotlinking images on my site

I don't know if you have cPanel, but there's an option there where u can input domain names / IPs that can link to images or files directly. You can allow only your site or disallow the offending site.

_________________
Why is it that there's always more month at the end of my money?

tattoohead's server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS)
Linux/1.3.33/4.0.25-standard/4.3.10/9.0.5.0
Back to top
View user's profile Visit poster's website MSN Messenger
Display posts from previous:   
Post new topic    Revive this topic    Printer Friendly Page    Forum Index ⇒  Security
Page 1 of 2
All times are GMT
Go to page 1, 2  Next

Archive Revive
Username:
This is an archived topic - your reply will not be appended here.
Instead, a new topic will be generated in the active forum.
The new topic will provide a reference link to this archived topic.
 
   Toggle Content User Info

Welcome Anonymous

Nickname
Password
(Register)

   Toggle Content Last CVS commits
· Fixed .ico Expires header.
· Removed domain name from cookies so subdomains wont access them anymore.
· CSS and JS, case insensitives.
· CSS and JS, send correct HTTP 1.1 headers and fixed issues where themes and...
· Further security class improvements.
· 301 redirects on LEO changes
· Option to force 3xx http status codes
· Validate googlebot.com and google.com crawlers.
· CCBot
· Rss with etag and atom.

read more...

   Toggle Content Community

Support for DragonflyCMS in a other languages:

Deutsch
Español

   Toggle Content X-links
UltraEdit Browse Happy logo Firefox MySQL PostgreSQL Valid CSS! Valid XHTML 1.0! Unicode Encoded Badge NukeBiz Resources Raven DragonflyCMS Dedicated Now InsideSupport Lampe Berger

You are seeing squares or questionmarks on this page?

All content of this website is copyrighted by the Creative Commons NC-SA
The logos and trademarks used on this site are the property of their respective owners
We are not responsible for comments posted by our users, as they are the property of the poster.
Our server runs on a P3 1.2GHz with 512MB RAM with no accelerators
Support GoPHP5.org
Interactive software released under GNU GPL, Code Credits, Privacy Policy