View Single Post
Old 05-09-2011, 08:27 AM  
raymor
Confirmed User
 
Join Date: Oct 2002
Posts: 3,745
We have a network of sites that we set up like that and the software is available. All new updates
and everything show on on the tour area, which provides Google with a lot of pages to
spider. You can see the thumbs pages, but when you click to see the full video or full
sized image you have to be logged in.

Contact [email protected] or call 979-530-1300.

Be careful if you do this with a home grown system, or using any system designed by someone
not certified in security. It's tricky to design correctly where it runs both the public area and the
protected area from one system like that, where the tour displays all of the latest updates and
everything from within the members' area. Most of the time when people do that it's actually very
easy for the bad guys to grab all of your content without logging in. The most common "solution"
to that problem, running all of the pics and videos through a PHP script, actually creates a huge
new problem - the bad guys can use the video download script to instead download your password
file and other sensitive files.

The basic approach we used is that just as site.com and www.site.com and two names
for the same site, members.site.com is also another alias for the same site. If you use the
name members.site.com, you have to log in, and you have access to everything. If you are
on www.site.com, you have no access to full sized images or videos. Using the two names
provides the clean separation required for appropriate security.
__________________
For historical display only. This information is not current:
support@bettercgi.com ICQ 7208627
Strongbox - The next generation in site security
Throttlebox - The next generation in bandwidth control
Clonebox - Backup and disaster recovery on steroids
raymor is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote