Hotlinking Script 100% Fullproof(!?!) - GoFuckYourself.com

cj-design · 05-30-2003, 07:22 PM

Hey,

I think I may have found the solution to hotlinking files. Hopefully saving you guys loads of money from bandwidth.

What I need to do, however, is test it first. I want to make sure that nobody can download my file.

The test file is:
http://www.cj-design.com/downloads/h...hitcounter.zip

(you could try any file on my site, but this one is the smallest in KB's)

OK, try as many methods as you can to download this file - WITHOUT GOING THROUGH MY WEBSITE!

The leech file is here:
http://www.cj-design.com/leechers.php

It will keep a record of how many times the file has tried to be leeched.

I must stress that this method of hotlinking requires no php/cgi programming although a php script will allow for the set up of the file.

If you can manage to leech the file, please post:

1) how you did it
2) where you leeched it from
3) how crap you think my attempt was

Now get leeching!

P.S for the people who struggle with HTML, to insert it into your webpage use this code:

PHP Code:


			
<a href="http://www.cj-design.com/downloads/hitcounter/dl/hitcounter.zip">Link</a>

cj-design · 05-30-2003, 07:38 PM

just to let everyone know;

the 'script' will protect any type of file: jpg, gif, zip, mpg, avi, mov, asf, wmv, wmf, rm, ram you name it.

Also, what would be the price you would pay to stop people taking your expensive bandwidth? - should this script be free?

Libertine · 05-30-2003, 07:40 PM

Quote:

Originally posted by cj-design
Also, what would be the price you would pay to stop people taking your expensive bandwidth? - should this script be free?

Depends on the amount of work you put into it, and more importantly, what you think it's worth.

cj-design · 05-30-2003, 07:45 PM

Thanks for the question son.

I put alot of work into it, researching apache mainly - thats the only downside of this script incidently, it will not work on windows.

I think it is worth a few dollars put it that way. If you look at the prices of anti-leech scripts out there - they cost quite a bit (the decent ones anyway)

So are you gonna carry on paying bandwidth overflow charges or pay a one off price for this beauty?

name your price - webmaster?cj-design.com (change ? to @)

tical · 05-30-2003, 07:58 PM

looks good

GotGauge · 05-30-2003, 08:02 PM

Anyone have a Script for a windows box?

chodadog · 05-30-2003, 08:06 PM

I was successfully able to download and unzip the file using flashget.

http://www.amazesoft.com/

cj-design · 05-31-2003, 04:57 AM

Doh!

Ok, so its not 100% fullproof then! I cant see a way of getting around flashnet.

ServerGenius · 05-31-2003, 05:02 AM

The easiest trick to fool hotlink solutions is to have a small script
that leeches the files and writes a fake referrer in the request header.

DynaMite

cj-design · 05-31-2003, 05:06 AM

Did you try that method on my script? I don't think it would work

cj-design · 05-31-2003, 06:45 AM

bump - does anyone actually post on GFY anymore for the purpose it was created?

spacecat · 05-31-2003, 06:59 AM

It's not really possible to stop 100% of leeching - the aim is to stop 99.9% of it

It's a piece of piss to set up a curl request with the referer and user agent faked - the web server cannot tell the difference from a real surfer.

However, you just want to stop a massive bandwidth hit from having tons of joe surfers looking at it ..

This solution looks pretty good:

http://www.serverwatch.com/tutorials...le.php/1132731

Doesnt use rewrite but looks effectively the same. Just put a .htaccess with 'Allow from All' in it, for the dirs you want to leave hotlinkable, and modify the extensions to include the file types you want to protect.

If you want to stop people from sucking 2 gigs of content from your paysite, that's another story - the way I would go at it would be to pipe logs to a process that can analyse activity on the fly .. then set it to watch for suspicious activity that indicates leeching; then kill the account or 'Deny from' the IP of the leecher.

OR, set the document root to be a PHP script that can handle content negotiation.

Zayne E. · 05-31-2003, 07:00 AM

Hey James!

I post on GFY for good purpose...lots of fun-loving clowns like to turn posts into a circus though...keeps things lively

James has done some custom work for our sites and the stuff he wrote for us has worked like a charm...very pleased. He wrote a script for us that we were quoted a week or more to create by other programmers and as much as $15,000 (only the good lord knows why we were given a quote that high)...we caught James at a good time and he knocked it out of the ballpark in 5 hours for a price so reasonable I will not repeat it here.

He has since done quite a bit of work for us and we're thoroughly pleased with his skills and creativity. And he's extremely easy to work with - very personable. I know there's a lot of great programmers who frequent GFY...we have never worked with anyone but James and he is top-notch in our book.

cj-design · 05-31-2003, 12:54 PM

Thanks for the support!

Keev · 06-05-2004, 06:24 PM

wortha bump

Jedimaster · 06-05-2004, 06:30 PM

how does directnic.com do it with their free hosting?

calmlikeabomb · 06-05-2004, 06:52 PM

I downloaded the file with no problems using mozilla.

Project-Shadow · 06-05-2004, 06:54 PM

Quote:

Originally posted by calmlikeabomb
I downloaded the file with no problems using mozilla.

Post is over a year old

AMADude · 06-05-2004, 07:21 PM

Quote:

Originally posted by Project-Shadow
Post is over a year old

I didnt noticed until you said it.

05-30-2003, 07:22 PM	#1
cj-design Confirmed User Join Date: Apr 2003 Location: England Posts: 378	Hotlinking Script 100% Fullproof(!?!) Hey, I think I may have found the solution to hotlinking files. Hopefully saving you guys loads of money from bandwidth. What I need to do, however, is test it first. I want to make sure that nobody can download my file. The test file is: http://www.cj-design.com/downloads/h...hitcounter.zip (you could try any file on my site, but this one is the smallest in KB's) OK, try as many methods as you can to download this file - WITHOUT GOING THROUGH MY WEBSITE! The leech file is here: http://www.cj-design.com/leechers.php It will keep a record of how many times the file has tried to be leeched. I must stress that this method of hotlinking requires no php/cgi programming although a php script will allow for the set up of the file. If you can manage to leech the file, please post: 1) how you did it 2) where you leeched it from 3) how crap you think my attempt was Now get leeching! P.S for the people who struggle with HTML, to insert it into your webpage use this code: PHP Code: `<a href="http://www.cj-design.com/downloads/hitcounter/dl/hitcounter.zip">Link</a>`

05-30-2003, 07:45 PM	#4
cj-design Confirmed User Join Date: Apr 2003 Location: England Posts: 378	Thanks for the question son. I put alot of work into it, researching apache mainly - thats the only downside of this script incidently, it will not work on windows. I think it is worth a few dollars put it that way. If you look at the prices of anti-leech scripts out there - they cost quite a bit (the decent ones anyway) So are you gonna carry on paying bandwidth overflow charges or pay a one off price for this beauty? name your price - webmaster?cj-design.com (change ? to @) Last edited by cj-design; 05-30-2003 at 07:50 PM..

05-30-2003, 08:02 PM	#6
GotGauge Confirmed User Join Date: Nov 2001 Location: USA Posts: 3,072	Anyone have a Script for a windows box? __________________ ICQ 22264474 [email protected]

05-30-2003, 08:06 PM	#7
chodadog Confirmed User Join Date: Apr 2002 Posts: 9,736	I was successfully able to download and unzip the file using flashget. http://www.amazesoft.com/ __________________ 26 + 6 = 1

05-31-2003, 05:02 AM	#9
ServerGenius Confirmed User Join Date: Feb 2002 Location: Amsterdam Posts: 9,377	The easiest trick to fool hotlink solutions is to have a small script that leeches the files and writes a fake referrer in the request header. DynaMite __________________ \| http://www.sinnerscash.com/ \| ICQ: 370820 \| Skype: SinnersCash \| AdultWhosWho \|

05-30-2003, 07:38 PM	#2
cj-design Confirmed User Join Date: Apr 2003 Location: England Posts: 378	just to let everyone know; the 'script' will protect any type of file: jpg, gif, zip, mpg, avi, mov, asf, wmv, wmf, rm, ram you name it. Also, what would be the price you would pay to stop people taking your expensive bandwidth? - should this script be free?

05-30-2003, 07:58 PM	#5
tical Confirmed User Join Date: Feb 2002 Location: Las Vegas Posts: 6,504	looks good

05-31-2003, 04:57 AM	#8
cj-design Confirmed User Join Date: Apr 2003 Location: England Posts: 378	Doh! Ok, so its not 100% fullproof then! I cant see a way of getting around flashnet.

05-31-2003, 05:06 AM	#10
cj-design Confirmed User Join Date: Apr 2003 Location: England Posts: 378	Did you try that method on my script? I don't think it would work

05-31-2003, 06:45 AM	#11
cj-design Confirmed User Join Date: Apr 2003 Location: England Posts: 378	bump - does anyone actually post on GFY anymore for the purpose it was created?

05-31-2003, 06:59 AM	#12
spacecat Registered User Join Date: Feb 2003 Location: Australia Posts: 21	It's not really possible to stop 100% of leeching - the aim is to stop 99.9% of it It's a piece of piss to set up a curl request with the referer and user agent faked - the web server cannot tell the difference from a real surfer. However, you just want to stop a massive bandwidth hit from having tons of joe surfers looking at it .. This solution looks pretty good: http://www.serverwatch.com/tutorials...le.php/1132731 Doesnt use rewrite but looks effectively the same. Just put a .htaccess with 'Allow from All' in it, for the dirs you want to leave hotlinkable, and modify the extensions to include the file types you want to protect. If you want to stop people from sucking 2 gigs of content from your paysite, that's another story - the way I would go at it would be to pipe logs to a process that can analyse activity on the fly .. then set it to watch for suspicious activity that indicates leeching; then kill the account or 'Deny from' the IP of the leecher. OR, set the document root to be a PHP script that can handle content negotiation. __________________ DOMAINS 4 SALE - click here pornfilmsonline.com sexmonthly.com realsexdoll.com

05-31-2003, 07:00 AM	#13
Zayne E. Confirmed User Industry Role: Join Date: Apr 2002 Posts: 1,383	Hey James! I post on GFY for good purpose...lots of fun-loving clowns like to turn posts into a circus though...keeps things lively James has done some custom work for our sites and the stuff he wrote for us has worked like a charm...very pleased. He wrote a script for us that we were quoted a week or more to create by other programmers and as much as $15,000 (only the good lord knows why we were given a quote that high)...we caught James at a good time and he knocked it out of the ballpark in 5 hours for a price so reasonable I will not repeat it here. He has since done quite a bit of work for us and we're thoroughly pleased with his skills and creativity. And he's extremely easy to work with - very personable. I know there's a lot of great programmers who frequent GFY...we have never worked with anyone but James and he is top-notch in our book.

05-31-2003, 12:54 PM	#14
cj-design Confirmed User Join Date: Apr 2003 Location: England Posts: 378	Thanks for the support!

06-05-2004, 06:24 PM	#15
Keev Confirmed User Join Date: May 2001 Posts: 5,335	wortha bump __________________ ReliableServers.com - NO REF LINK!

06-05-2004, 06:30 PM	#16
Jedimaster Registered User Join Date: Dec 2003 Posts: 2,120	how does directnic.com do it with their free hosting?

06-05-2004, 06:52 PM	#17
calmlikeabomb Confirmed User Join Date: May 2004 Location: SW Palm Bay, Florida Posts: 1,323	I downloaded the file with no problems using mozilla. __________________ subarus.