spam me - how to protect content

BlackIce is a windows firewall.

.htaccess is your basic way us apache to prompt for usernames & passwords, what you really want to have, is a script that will load the files from a non-public location, and check for cookies, referer-id and check that it's in a good session.

Please contact me on ICQ, I can help you.

ICQ: 201971159

Quick tip:

.htaccess is pretty unsecure. Easy to exploit that one.

If you simply use random generated passes for your members 8 - 12 characters in length, this makes it nearly impossible to brute force crack the system, and most crackers wont even bother to try - knowing its generated.

Of course there is many more things you want to do, this is just a simple tip i thought you might find handy

htaccess is not insecure, in fact, it is pretty much the standard in most web-based authentication procedures. If you've found a real exploit in the version of the MD5 algorithm that it uses - or alternately the system crypt() function that it uses, I'd be very appreciative if you would elaborate on this. Brute Force-able? Hell yes. Exploitable? Not hardly.

However, your suggestion for randomly generated passwords is a good one. Again, you don't exploit these passwords, you brute-force them. Based on what people usually set their passwords as - common names, phrases, 3l337 spellings, etc - it is relatively easy to brute-force these.

A very good solution to this problem is also to use some Apache mod_rewrite hackery. This is commonly used to prevent hotlinking off of sites, and can be easily modified to fit your particular situation. This goes beyond any "package" that you might be thinking of, because this feature is actually built into Apache (in most cases).

I'm sure others will follow up with some comments later on, but I thought I'd throw that info out for ya.

Thanks
-dant