I got hijacked by chinese leachers. need help asap..
Is there anyway to stop people from hotlingking flash files?
Collapse
X
-
-
YEah there is. We had the same issue. Our host did something about it. Like a htaccess kinda thing
Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.Comment
-
You can use referral blocking (mod_rewrite type of stuff) and it's generally "good enough" for a casual deterrent.
However, many browsers do *not* send a refferer header string for flash movie content, thus you cannot truly rely on it. Most sites won't bother hotlinking though, when 30-60% or whatever traffic doesn't get a good pageload.
The best way to do it is via secure download tokens, like lighttpd's mod_securedownload and about 5,000 others. Basically, you have your PHP code generate a link to the movie with a hash, using a shared secret. Your webserver then checks to ensure that this hash is valid prior to serving the file in question.
If both the PHP and the static files (.flv) are hosted on the same webserver instance, you can use a myriad of off-the-shelf anti-hotlink products. Nearly anything on the market.
If they are hosted elsewhere, most products will no longer work - and you'll want something like the hash sharing mechanism outlined above.
As for PHP "streaming" - yeah, if you want to do about 1/100th of what the server can actually push, sure
Running static files through PHP is a horrible idea, unless you simply don't have enough traffic for it to matter and it's the easiest solution for your particular developers.
Regards,
-PhilComment
-
Try this:
Found it on Google, I haven't tested it though.Code:RewriteEngine On RewriteCond %{HTTP_REFERER} !^$ RewriteCond %{HTTP_REFERER} !^http://(www\.)?yoursite.com(/)?.*$ [NC] RewriteRule .*.(jpg|flv)$ - [NC,F]Last edited by Voodoo; 10-18-2008, 08:03 PM.

"I'm selflessly supporting the common good, but only coincidentally looking out for No.1."
Comment
-
yup.. although that includes jpg's..
i use a similar code on all of our servers for mainly jpg's and gif.. to keep bandwidth down..400 HARDL1NKS only $117! - (100 for $45)
BL0G P0STS $1.85+ | 55,000 Word Comprehensive Synonym Database 2 REVIEW COPIES AVAIL AT 50% OFF! | 16 yr old Aged Domains 4Sale
ICQ: 265-593-735 ~ Skype: Naughty-Pages ~ email: ez_money4u(at)comcast(dot)netComment
-
Comment
-
Listen to Phil21..
He's the one who PERSONALLY helped me and fixed our problem.
Industry Hall Of Fame Legend Mike Jones
Bow to the Power - Still BP4L
http://gfyawards.com/hall-of-fame
Learn about it kids.Comment
-
Great post PhilYou can use referral blocking (mod_rewrite type of stuff) and it's generally "good enough" for a casual deterrent.
However, many browsers do *not* send a refferer header string for flash movie content, thus you cannot truly rely on it. Most sites won't bother hotlinking though, when 30-60% or whatever traffic doesn't get a good pageload.
The best way to do it is via secure download tokens, like lighttpd's mod_securedownload and about 5,000 others. Basically, you have your PHP code generate a link to the movie with a hash, using a shared secret. Your webserver then checks to ensure that this hash is valid prior to serving the file in question.
If both the PHP and the static files (.flv) are hosted on the same webserver instance, you can use a myriad of off-the-shelf anti-hotlink products. Nearly anything on the market.
If they are hosted elsewhere, most products will no longer work - and you'll want something like the hash sharing mechanism outlined above.
As for PHP "streaming" - yeah, if you want to do about 1/100th of what the server can actually push, sure
Running static files through PHP is a horrible idea, unless you simply don't have enough traffic for it to matter and it's the easiest solution for your particular developers.
Regards,
-Phil
Comment
-
this has nothing to do with firefox LOL.. this is related to the server
(FYI: the yoursite.com is the site(s) you will allow to hotlink)
(instead of using it in htaccess i use it in a separate server-wide rules file..)400 HARDL1NKS only $117! - (100 for $45)
BL0G P0STS $1.85+ | 55,000 Word Comprehensive Synonym Database 2 REVIEW COPIES AVAIL AT 50% OFF! | 16 yr old Aged Domains 4Sale
ICQ: 265-593-735 ~ Skype: Naughty-Pages ~ email: ez_money4u(at)comcast(dot)netComment
-
Exactly what we have been using for years. Something about sessions is all I remember when our programmers explained it.You can use referral blocking (mod_rewrite type of stuff) and it's generally "good enough" for a casual deterrent.
However, many browsers do *not* send a refferer header string for flash movie content, thus you cannot truly rely on it. Most sites won't bother hotlinking though, when 30-60% or whatever traffic doesn't get a good pageload.
The best way to do it is via secure download tokens, like lighttpd's mod_securedownload and about 5,000 others. Basically, you have your PHP code generate a link to the movie with a hash, using a shared secret. Your webserver then checks to ensure that this hash is valid prior to serving the file in question.
If both the PHP and the static files (.flv) are hosted on the same webserver instance, you can use a myriad of off-the-shelf anti-hotlink products. Nearly anything on the market.
If they are hosted elsewhere, most products will no longer work - and you'll want something like the hash sharing mechanism outlined above.
As for PHP "streaming" - yeah, if you want to do about 1/100th of what the server can actually push, sure
Running static files through PHP is a horrible idea, unless you simply don't have enough traffic for it to matter and it's the easiest solution for your particular developers.
Regards,
-Phil$ CLICKMEMEDIA.COM $ CONVERTING ETHNIC TRAFFIC SINCE 1998 ~ $30+PPS
BLACK-X.COM - NEW BLACK EX-GF SITE
CLICKMEMEDIA.COM ~ ICQ - 8788771Comment

Comment