Hotlinking Movie Protection? - GoFuckYourself.com

pornJester · 05-16-2003, 08:52 PM

Anyone know an easy way to prevent movie file hotlinking?

p00p · 05-16-2003, 09:26 PM

Try to get Zoink's attention. He had a link that showed how....

PANTYHOSE PROPHET · 05-17-2003, 12:17 AM

Check this site out
Anti Hotlinking

FreeHugeMovies · 05-17-2003, 12:34 AM

or have your movies hosted at www.likewhoa.com They have a scrip that works great!

arial · 05-17-2003, 01:24 AM

Add this to your .htaccess (remove the spaces after the < )

SetEnvIfNoCase Referer "^http://site.com/" locally_linked=1
SetEnvIfNoCase Referer "^http://www.site.com/" locally_linked=1
SetEnvIfNoCase Referer "^$" locally_linked=1
< FilesMatch "\.(gif|png|jpe?g|mpg|mpeg|avi|wmv)$">
Order Allow,Deny
Allow from env=locally_linked
< /FilesMatch>

jpoker · 05-17-2003, 03:01 AM

here's the link that zoink previously posted:

http://www.zoink.org/prevent-hotlinking-of-movies.html

- johnny

chodadog · 05-17-2003, 03:39 AM

Quote:

Originally posted by arial
Add this to your .htaccess (remove the spaces after the < )

SetEnvIfNoCase Referer "^http://site.com/" locally_linked=1
SetEnvIfNoCase Referer "^http://www.site.com/" locally_linked=1
SetEnvIfNoCase Referer "^$" locally_linked=1
< FilesMatch "\.(gif|png|jpe?g|mpg|mpeg|avi|wmv)$">
Order Allow,Deny
Allow from env=locally_linked
< /FilesMatch>

I hope you're aware that the method you're using is completely useless when attempting to prevent hotlinking of video media files. The media players don't send a referring url to the host. So, even with that .htaccess in place, people will still be able to hotlink your movies. *as far as i know*

Someone correct me if i'm wrong.

flashfreak · 05-17-2003, 04:00 AM

www.oxeo.com has antihotlink protection

FreeOnes · 05-17-2003, 06:34 AM

I have one, contact me if you are interested
http://www.freeones.com/videos/

goBigtime · 05-17-2003, 07:19 AM

Quote:

Originally posted by arial
Add this to your .htaccess (remove the spaces after the < )

SetEnvIfNoCase Referer "^http://site.com/" locally_linked=1
SetEnvIfNoCase Referer "^http://www.site.com/" locally_linked=1
SetEnvIfNoCase Referer "^$" locally_linked=1
< FilesMatch "\.(gif|png|jpe?g|mpg|mpeg|avi|wmv)$">
Order Allow,Deny
Allow from env=locally_linked
< /FilesMatch>

Umm... but movie players don't give ref urls.

goBigtime · 05-17-2003, 07:44 AM

I was thinking about this as a way to do it without using cookies, and keeping things copacetic with TGP's:

1. Create a mysql database with IP & a TIMESTAMP

2. Use mod_rewrite to rewrite all your gallery pages (with .html extentions to please the TGP's) - or anything under your gallery directory to a script in language of your choice (mod_perl, PHP, C.. something fast).... lets call it storeip.cgi

So someone hits galleryXYX123.html and gets redirected to storeip.cgi?galleryXYZ123.html, which stores the persons IP & timestamp and then pulls up the galleryXYZ123.tmpl template.

3. On the gallery page you have links to you actual movie samples. Again, to keep it TGP friendly you don't want to use CGI's.. so you could keep all your movie samples in a folder called MSAMPS & then rewrite all requests to that directory to getmovie.cgi?filename.ext

So a request for movie1.mpg would get rewritten to getmovie.cgi?movie1.mpg which would CHECK THE MYSQL DATABASE for the ip of the person requesting the movie

> if they are in the database, then give them the movie.
> if they are not, then give them the error page.

Again this script should be written with a resource friendly language... mod_perl, mod_php maybe, or better in C.

4. Write a 'flush' script that would flush out the mysql database for anyone entries older than XX mins.

Of course theres always www.antihotlinking.com but I refuse to run any closed source 3rd party apps/scripts on my money-making traffic-producing production boxes.

But for $199 or whatever they charge now, it might be the solution for you if your willing to accept the potential risks of running pre-compiled software.

It's a lot easier to implement than my idea, and would be perfect if they gave you the source code to audit.

(As far as I know they wont, but you should dEMAnd it.)

Hansm · 05-17-2003, 08:41 AM

i can make a custom php script like this if someone needs it.

but its for commercial purpose, so its not free.

pornJester · 05-17-2003, 01:58 PM

Quote:

Originally posted by jpoker
here's the link that zoink previously posted:

http://www.zoink.org/prevent-hotlinking-of-movies.html

- johnny

Has anyone tried this method?

Shoplifter · 05-17-2003, 02:14 PM

Quote:

Originally posted by pornJester

Has anyone tried this method?

Interesting and worth a try.

The only things are that it will not help you with pages that currently exist without the head tag.

I wonder if TGP's will get pissed about the java.

Lane · 05-17-2003, 02:22 PM

the cheap simple solutions will only let the users with javasccript or cookies to access the movies. the rest of them will be blocked.

thats not a small % to sacrifice

Shoplifter · 05-17-2003, 02:35 PM

Quote:

Originally posted by Lane
the cheap simple solutions will only let the users with javasccript or cookies to access the movies. the rest of them will be blocked.

thats not a small % to sacrifice

Sure, but the rest are sent to a sell page formatted for them. It sounds very interesting.

I think that hotlinking is increasingly not the issue though, overwhelming amounts of worthless traffic is more of a problem.

If your URL gets posted on a Chinese BBS this will not do jack squat to help you.

goBigtime · 05-17-2003, 02:56 PM

Quote:

Originally posted by pornJester

Has anyone tried this method?

It relies on JA VA SCRIPT & cookies.

I think they underestimate the number of surfers who have opted for 'privacy' (read - no cookies) these days.

Everyone is after anti-popup / popup blocker software these days & those almost always have some cookie blocking function built in.

I don't like to rely on things that users could turn functionality for too easily or accidentally.

goBigtime · 05-17-2003, 03:01 PM

Quote:

Originally posted by Hansm
i can make a custom php script like this if someone needs it.

but its for commercial purpose, so its not free.

DAMN YOU! You're going to make my script idea & publicly charge people for it???

You better make it free (and then you can claim all the free fame) or I'll wait until you spam the commerical product on GFY... and then I'll release our version to everyone that wants it for free

[Dan] · 05-17-2003, 03:18 PM

But if they have cookies off, and generate a sale, it won't be tracked by your sponsor.. So you're better blocking them, you'll save bandwidth on traffic that won't do any money anyway

goBigtime · 05-17-2003, 04:16 PM

Quote:

Originally posted by [Dan]
But if they have cookies off, and generate a sale, it won't be tracked by your sponsor.. So you're better blocking them, you'll save bandwidth on traffic that won't do any money anyway

Unless you are the sponsor.

Shoplifter · 05-17-2003, 04:21 PM

Quote:

Originally posted by arial
Add this to your .htaccess (remove the spaces after the < )

SetEnvIfNoCase Referer "^http://site.com/" locally_linked=1
SetEnvIfNoCase Referer "^http://www.site.com/" locally_linked=1
SetEnvIfNoCase Referer "^$" locally_linked=1
< FilesMatch "\.(gif|png|jpe?g|mpg|mpeg|avi|wmv)$">
Order Allow,Deny
Allow from env=locally_linked
< /FilesMatch>

Ok I tried this out and it doesn't do quite what I thought it would do. I thought it might block access UNLESS the viewer is actually clicking through your gallery page. A surfer can still cut and paste the direct URL to the movie off of a BBS page.

What you want is to make sure that the surfer is seeing your page, and I guess that means using the cookie method.

I would buy a script that:

1) will only show the movie if the surfer is clicking through my gallery page.

2) can block access to the page itself if referred by a hostile (BBS) page.

3) can block based on IP range.

goBigtime · 05-17-2003, 04:27 PM

You could always tag your sample clips with your domain...

Then it wouldn't matter if people hotlinked them right?
(since they would be seeing you.com when they play it)

pornJester · 05-17-2003, 04:50 PM

Quote:

Originally posted by goBigtime
You could always tag your sample clips with your domain...

Then it wouldn't matter if people hotlinked them right?
(since they would be seeing you.com when they play it)

But what about these Asian BBS's that are probably filled with people who don't have CCs.

goBigtime · 05-17-2003, 04:53 PM

Quote:

Originally posted by pornJester

But what about these Asian BBS's that are probably filled with people who don't have CCs.

Yeah I hear you... or the people that are using their sponsors movies on their own gallery pages.

Yeah I guess some people do need hotlinking protection...

x3m · 05-18-2003, 04:58 PM

1. htaccess+cookie is a bad idea because, as someone mentioned, you will be surprised how many people have their cookies off, including tgp reviewers.

2. using a perl or php scripts to process each and every request your have is asking for trouble with server load if you have any significant traffic

3. having pages to go through any type of script creates problems with some tgp scripts. they will see this page being modified when they check it.

4. relying only on IP's as a way to authorize the surfers to view movies isn't 100% safe.

I will be happy to address any additional questions about movie antihotlinking.

Shoplifter · 05-18-2003, 05:20 PM

Quote:

Originally posted by goBigtime
You could always tag your sample clips with your domain...

Then it wouldn't matter if people hotlinked them right?
(since they would be seeing you.com when they play it)

Great, then they would know what site to brute force after they have seen the movie.

The Chinese guys are just not going to pay for membership.

05-16-2003, 08:52 PM	#1
pornJester Confirmed User Join Date: Mar 2001 Location: Florida Posts: 6,138	Hotlinking Movie Protection? Anyone know an easy way to prevent movie file hotlinking? __________________ FreshBucks \| Webmaster Vault \| GayAW Trusted Names in Adult. ICQ 9157.3698

05-16-2003, 09:26 PM	#2
p00p Confirmed User Join Date: Dec 2002 Location: CanaDUH Posts: 5,125	Try to get Zoink's attention. He had a link that showed how.... __________________ ICQ: 316365783 <a href="http://www.hostultra.com/~p00p" target="_blank">TEST</a>

05-17-2003, 01:24 AM	#5
arial Confirmed User Join Date: Jul 2002 Location: Bay Area Posts: 4,012	Add this to your .htaccess (remove the spaces after the < ) SetEnvIfNoCase Referer "^http://site.com/" locally_linked=1 SetEnvIfNoCase Referer "^http://www.site.com/" locally_linked=1 SetEnvIfNoCase Referer "^$" locally_linked=1 < FilesMatch "\.(gif\|png\|jpe?g\|mpg\|mpeg\|avi\|wmv)$"> Order Allow,Deny Allow from env=locally_linked < /FilesMatch> Last edited by arial; 05-17-2003 at 01:27 AM..

05-17-2003, 03:01 AM	#6
jpoker Confirmed User Join Date: Feb 2003 Location: Vancouver Posts: 362	here's the link that zoink previously posted: http://www.zoink.org/prevent-hotlinking-of-movies.html - johnny __________________ http://www.bigboobdreams.com Big Juicy Healthy Boobs

05-17-2003, 04:00 AM	#8
flashfreak Confirmed User Industry Role: Join Date: Jun 2002 Location: cloud number 9 Posts: 4,396	www.oxeo.com has antihotlink protection __________________ SEO Mogul \| ICQ: 163671223

05-17-2003, 12:17 AM	#3
PANTYHOSE PROPHET Confirmed User Join Date: Mar 2003 Posts: 287	Check this site out Anti Hotlinking

05-17-2003, 12:34 AM	#4
FreeHugeMovies Too lazy to set a custom title Join Date: Dec 2001 Location: Charlotte, NC Posts: 14,137	or have your movies hosted at www.likewhoa.com They have a scrip that works great!

05-17-2003, 06:34 AM	#9
FreeOnes Confirmed User Join Date: Jul 2001 Location: The Netherlands Posts: 3,400	I have one, contact me if you are interested http://www.freeones.com/videos/ __________________ The new FreeOnes! - AdultFilmStarContent - BabeGalleries and much more! - 1Strike Movies and much more! All powered by Xpressa

05-17-2003, 07:44 AM	#11
goBigtime Confirmed User Join Date: Nov 2002 Posts: 7,761	I was thinking about this as a way to do it without using cookies, and keeping things copacetic with TGP's: 1. Create a mysql database with IP & a TIMESTAMP 2. Use mod_rewrite to rewrite all your gallery pages (with .html extentions to please the TGP's) - or anything under your gallery directory to a script in language of your choice (mod_perl, PHP, C.. something fast).... lets call it storeip.cgi So someone hits galleryXYX123.html and gets redirected to storeip.cgi?galleryXYZ123.html, which stores the persons IP & timestamp and then pulls up the galleryXYZ123.tmpl template. 3. On the gallery page you have links to you actual movie samples. Again, to keep it TGP friendly you don't want to use CGI's.. so you could keep all your movie samples in a folder called MSAMPS & then rewrite all requests to that directory to getmovie.cgi?filename.ext So a request for movie1.mpg would get rewritten to getmovie.cgi?movie1.mpg which would CHECK THE MYSQL DATABASE for the ip of the person requesting the movie > if they are in the database, then give them the movie. > if they are not, then give them the error page. Again this script should be written with a resource friendly language... mod_perl, mod_php maybe, or better in C. 4. Write a 'flush' script that would flush out the mysql database for anyone entries older than XX mins. Of course theres always www.antihotlinking.com but I refuse to run any closed source 3rd party apps/scripts on my money-making traffic-producing production boxes. But for $199 or whatever they charge now, it might be the solution for you if your willing to accept the potential risks of running pre-compiled software. It's a lot easier to implement than my idea, and would be perfect if they gave you the source code to audit. (As far as I know they wont, but you should dEMAnd it.) Last edited by goBigtime; 05-17-2003 at 07:47 AM..

05-17-2003, 08:41 AM	#12
Hansm Confirmed User Join Date: Jun 2002 Posts: 871	i can make a custom php script like this if someone needs it. but its for commercial purpose, so its not free.

05-17-2003, 02:22 PM	#15
Lane Will code for food... Join Date: Apr 2001 Location: Buckeye, AZ Posts: 8,496	the cheap simple solutions will only let the users with javasccript or cookies to access the movies. the rest of them will be blocked. thats not a small % to sacrifice __________________

05-17-2003, 03:18 PM	#19
[Dan] Confirmed User Join Date: Oct 2001 Location: Somewhere in time Posts: 143	But if they have cookies off, and generate a sale, it won't be tracked by your sponsor.. So you're better blocking them, you'll save bandwidth on traffic that won't do any money anyway

05-17-2003, 04:27 PM	#22
goBigtime Confirmed User Join Date: Nov 2002 Posts: 7,761	You could always tag your sample clips with your domain... Then it wouldn't matter if people hotlinked them right? (since they would be seeing you.com when they play it)

05-18-2003, 04:58 PM	#25
x3m Confirmed User Join Date: May 2001 Posts: 256	1. htaccess+cookie is a bad idea because, as someone mentioned, you will be surprised how many people have their cookies off, including tgp reviewers. 2. using a perl or php scripts to process each and every request your have is asking for trouble with server load if you have any significant traffic 3. having pages to go through any type of script creates problems with some tgp scripts. they will see this page being modified when they check it. 4. relying only on IP's as a way to authorize the surfers to view movies isn't 100% safe. I will be happy to address any additional questions about movie antihotlinking.