GoFuckYourself.com - Adult Webmaster Forum - NEw fusker = ixtractor.com -> impossible to stop from hotlinking !

Page 2 of 2

Show 40 post(s) from this thread on one page

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)

- Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)

- - NEw fusker = ixtractor.com -> impossible to stop from hotlinking ! (https://gfy.com/showthread.php?t=649832)

CHMOD

08-30-2006 12:02 PM

Quote:

Originally Posted by borked

Actually, this is by far the simplest! Even a simple session cookie would suffice.

What about IE6 wich doesn't allow cookies by default ?

Quote:

Originally Posted by borked

...sorry for the japanese, but this will solve any of those problems

Code:

<img src="/display.php?id=34" border="0">

then

Code:

<?



$connection=@mysql_connect(...);



@mysql_select_db(...);



$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];



$rawdb=@mysql_query ($query,$connection);



if($rawdb AND @mysql_num_rows($rawdb)>0){



  $array=@ mysql_fetch_array($result);



  if (!empty($array["fileContents"])){



    // Output the MIME header



    header("Content-Type: ".$array["mime"]}");



    // Output the image



    echo $array["file"];



  }else{



    // something else...



  }



  @mysql_free_result($rawdb);



}else{



  // something else...



}



@mysql_close($connection);



?>

I don't know if it works but I surely can't do this myself.. I don't know shit about PHP... If it is the only solution, I'll have to hire someone.

s9ann0

08-30-2006 12:11 PM

why not just change the rewrite rules to umm... not allow blank referers from mozilla? I dunno something like that

s9ann0

08-30-2006 12:15 PM

something like this might work:

Code:

RewriteEngine On

RewriteCond %{HTTP_REFERER}        =""

RewriteCond %{HTTP_USER_AGENT}         !^.*MSIE

RewriteCond %{REQUEST_URI}        !\.*htm$                                [NC]

RewriteCond %{REQUEST_URI}        !\.*html$                                [NC]

RewriteCond %{REQUEST_URI}        !\.*/$

RewriteRule ^(.*)$                [F,L]



RewriteCond %{HTTP_REFERER}        !=""

RewriteCond %{HTTP_REFERER}        !^http://mydomain.com                        [NC]

RewriteCond %{HTTP_REFERER}        !^http://[a-z,A-Z,0-9,\-]+.mydomain.com        [NC]

RewriteCond %{REQUEST_URI}        !\.*htm$                                [NC]

RewriteCond %{REQUEST_URI}        !\.*html$                                [NC]

RewriteCond %{REQUEST_URI}        !\.*/$

RewriteRule ^(.*)$        [F,L]

SpeakEasy

08-30-2006 12:24 PM

Quote:

Originally Posted by CHMOD

They are burning my bandwith and maybe yours...

Forget the .htaccess it doesn't work !

HERE's WHY

I contacted webair 4 times regarding this.
Looks like they can't stop them.

LMAO...too funny:1orglaugh

The Sultan Of Smut

08-30-2006 12:36 PM

Quote:

Originally Posted by RawAlex

The best way to do things is to complain directly to the sponsors that are paying for this site to stay up, as well as reporting them to their host, and so on up the line.

Bravo! I'm always a fan of voting with my wallet so pulling down some banners from sponsors that choose to do business with this type of site is usually the solution I prefer. Since these sites obviously don't own the license or copywrite for the material they're using so I don't see why a host would have a legal problem taking down the site; especially of the host does business with the people that are being victimized.

Quote:

Originally Posted by RawAlex

You might even drop a dime on them to the DoJ about 2257 documents. I somehow doubt they have a single piece of 2257 for any model on their site.

Oooooo what a fiendishly good idea ;)

CHMOD

08-30-2006 12:38 PM

Quote:

Originally Posted by spanno

something like this might work:

Code:

RewriteEngine On

RewriteCond %{HTTP_REFERER}        =""

RewriteCond %{HTTP_USER_AGENT}         !^.*MSIE

RewriteCond %{REQUEST_URI}        !\.*htm$                                [NC]

RewriteCond %{REQUEST_URI}        !\.*html$                                [NC]

RewriteCond %{REQUEST_URI}        !\.*/$

RewriteRule ^(.*)$                [F,L]



RewriteCond %{HTTP_REFERER}        !=""

RewriteCond %{HTTP_REFERER}        !^http://mydomain.com                        [NC]

RewriteCond %{HTTP_REFERER}        !^http://[a-z,A-Z,0-9,\-]+.mydomain.com        [NC]

RewriteCond %{REQUEST_URI}        !\.*htm$                                [NC]

RewriteCond %{REQUEST_URI}        !\.*html$                                [NC]

RewriteCond %{REQUEST_URI}        !\.*/$

RewriteRule ^(.*)$        [F,L]

I am no programmer but this is the kind of .htaccess code I was waiting for...
Don't know if it will be effective tough...

Broda

08-30-2006 12:39 PM

Quote:

Originally Posted by borked

...sorry for the japanese, but this will solve any of those problems

Code:

<img src="/display.php?id=34" border="0">

then

Code:

<?



$connection=@mysql_connect(...);



@mysql_select_db(...);



$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];



$rawdb=@mysql_query ($query,$connection);



if($rawdb AND @mysql_num_rows($rawdb)>0){



  $array=@ mysql_fetch_array($result);



  if (!empty($array["fileContents"])){



    // Output the MIME header



    header("Content-Type: ".$array["mime"]}");



    // Output the image



    echo $array["file"];



  }else{



    // something else...



  }



  @mysql_free_result($rawdb);



}else{



  // something else...



}



@mysql_close($connection);



?>

This is the solution I would suggest.

All that nonsense about constantly renaming your folders, and redirecting non-ref-url traffic.. do any of you guys discussing this actually submit free sites or galleries? jeeez....

borked

08-30-2006 01:04 PM

Quote:

Originally Posted by Broda

just in case anyone was going to try and implement this, don't jsut do it blindly - for eg in my example, you're passing a GET variable directly to mysql which is always a bad idea....
so at least replace

Code:

$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];

with

Code:

$query="SELECT mime, file FROM images WHERE id=".mysql_real_escape_string($_GET["id"]);

Don't want to opening up a security hole there now

borked

08-30-2006 01:46 PM

OK, this js shit works - no dbase no nothing, just javascript. Call it from an iframe or whatever you want...not sure, but prolly able to call it as a header to all images from htaccess....either way the code works and is simple

Code:

<script language=javascript>

//Beginning of "test.js" file

var accepted_domains=new Array("yourdomain.com","www.yourdomain.com")



var domaincheck=document.location.href //retrieve the current URL of user browser

var accepted_ok=false //set acess to false by default



if (domaincheck.indexOf("http")!=-1){ //if this is a http request

for (r=0;r<accepted_domains.length;r++){

if (domaincheck.indexOf(accepted_domains[r])!=-1){ //if a match is found

accepted_ok=true //set access to true, and break out of loop

break

}

}

}

else

accepted_ok=true



if (!accepted_ok){

alert("Fuck off linking to my images!!")

history.back(-1)

}



</script>

<img src="image123.jpg">

PussyTeenies

08-30-2006 01:51 PM

a firewall?

Arty	08-30-2006 02:12 PM

Quote:

Originally Posted by CHMOD

There is something I am missing here...

If, in example, I am using Ixtractor to view my pics now. It will hotlink the pictures wherever they are... Now if the script changes the image folder name in, let's say 30 minutes... When someone will use Ixtractor in 35 minutes he will simply see hotlinked images from the new named folder won't he ?

No, check out that sample:

1 ixtractor parses that gallery http://www.teamnude.com/twistys511/al4a.html
2 grabs image links and creates that page in their system http://www.ixtractor.com/display335248.html
3. images are directly linked from host. like http://www.teamnude.com/twistys511/01.jpg

As you can see, they are hotlinking images not the page itself. So, in 35 minutes that folder (image) won't be there. Images will be broken unless they re-parse the gallery page to grab new image links. But those will be broken again after 30 mins..

I hope this helps... :)

Arty	08-30-2006 02:20 PM

Quote:

Originally Posted by Broda

It is not actually renaming folders, just creates a symbolic link to it and changes that link over time.

Regarding MySQL solution, do you know what would happen under heavy load? Apache executes php which connects to MySql to grab binary data for every single image? I wouldn't submit that to the hun :helpme

rowan

08-30-2006 02:27 PM

Quote:

Originally Posted by borked

...sorry for the japanese, but this will solve any of those problems

Code:

<img src="/display.php?id=34" border="0">

then

Code:

<?



$connection=@mysql_connect(...);



@mysql_select_db(...);



$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];



$rawdb=@mysql_query ($query,$connection);



if($rawdb AND @mysql_num_rows($rawdb)>0){



  $array=@ mysql_fetch_array($result);



  if (!empty($array["fileContents"])){



    // Output the MIME header



    header("Content-Type: ".$array["mime"]}");



    // Output the image



    echo $array["file"];



  }else{



    // something else...



  }



  @mysql_free_result($rawdb);



}else{



  // something else...



}



@mysql_close($connection);



?>

I looked at this a few times and all I can see is code to send the contents of an image from a mysql db. Where's the hotlink protection?

Boss Traffic Jim

08-30-2006 03:05 PM

Any 1/2 way decent host should solve this for you:2 cents: :2 cents: If yours can't or won't then I would say it's time to move..:2 cents:

Broda

08-30-2006 03:10 PM

Quote:

Originally Posted by Arty

Yeah I know what would happen. But there are other ways to do it. The technique itself is a viable solution. Just not using mysql :)

And I definitely would not submit a gallery that changes one little bit to thehun either. Wouldn't be much point in that since it would be removed from the list within 30 minutes.
Unless you mean something really clever with a symbolic link, no matter what, to make it effective, there would have to be some change to the gallery/pic page.

Not looking to start a discussion... each to his own :)

borked

08-30-2006 11:22 PM

Quote:

Originally Posted by rowan

I looked at this a few times and all I can see is code to send the contents of an image from a mysql db. Where's the hotlink protection?

I was thinking more along the lines of using sessions to make the call. But as pointed out, browsers set to not accept cookies by default would get locked out.

Then I thought of the javascript solution below. You could maybe only implement the javascript if there was no referer value, that way not locking out those that have javascript turned off...unless you have javascript off and referer set to zero, but then in that case scenario, you're prolly up to no good anyways....

Quote:

Originally Posted by borked

Code:

<script language=javascript>

//Beginning of "test.js" file

var accepted_domains=new Array("yourdomain.com","www.yourdomain.com")



var domaincheck=document.location.href //retrieve the current URL of user browser

var accepted_ok=false //set acess to false by default



if (domaincheck.indexOf("http")!=-1){ //if this is a http request

for (r=0;r<accepted_domains.length;r++){

if (domaincheck.indexOf(accepted_domains[r])!=-1){ //if a match is found

accepted_ok=true //set access to true, and break out of loop

break

}

}

}

else

accepted_ok=true



if (!accepted_ok){

alert("Fuck off linking to my images!!")

history.back(-1)

}



</script>

<img src="image123.jpg">

toddler

08-30-2006 11:48 PM

Split had it above .Just drop the fucking route people, its NOT rocket science.

Brujah

08-31-2006 12:44 AM

I love all the "it's not rocket science..." comments, who don't realize what they're saying.. or how simple it is to get around. :)

All times are GMT -7. The time now is 11:57 AM.

Page 2 of 2

Show 40 post(s) from this thread on one page