a way around htaccess? (hotlinking) - GoFuckYourself.com

Dawgy · 04-10-2004, 10:01 PM

i have a hotlinker that seems to be getting around my htaccess. ive put in his domains, his IPs, even the exact url to the page linking my images, and the images still show up... ive cleared my local cache, etc, etc... i cant figure this one out.

anyone know if its possible to go around htaccess?
is something else going on here?

KMR Stitch · 04-10-2004, 10:04 PM

Change hosts..

powerbubba · 04-10-2004, 10:17 PM

I think you're referring to fusker, and they use something called LWP to get around the htaccess issue, the research I did on this is over 2 years old, I forget some of the details but one solution someone gave me was to use some cgi mechanism to check referrer info on the fly (didn't, wasn't worth it)

Sambo · 04-10-2004, 10:24 PM

Quote:

Originally posted by powerbubba
I think you're referring to fusker, and they use something called LWP to get around the htaccess issue, the research I did on this is over 2 years old, I forget some of the details but one solution someone gave me was to use some cgi mechanism to check referrer info on the fly (didn't, wasn't worth it)

If u can disallow agents try disallowing libwww-perl/5.76 or better yet libwww*

I could be off track here..... but it is just an idea

Wilber · 04-10-2004, 10:24 PM

You going at it a bit wrong. You want to let the hotlink attempt in because
you can redirect the traffic for 404/403 sales. Let the hotlinkers do their
thing because to you it's free traffic.

I made a page here have a look at an example. It's too hard to post code
here now with all the hahahahahah etc bullshit.

example .htaccess

psyko514 · 04-10-2004, 10:30 PM

Quote:

Originally posted by Wilber
You going at it a bit wrong. You want to let the hotlink attempt in because
you can redirect the traffic for 404/403 sales. Let the hotlinkers do their
thing because to you it's free traffic.

I made a page here have a look at an example. It's too hard to post code
here now with all the hahahahahah etc bullshit.

example .htaccess

does that work when someone hotlinks an image within an HTML page? or will they only get a red x?

zentz · 04-10-2004, 10:31 PM

find him and kill him

Baal · 04-10-2004, 10:32 PM

It isn't that hard to fake Referrer info, which most .htaccess configs use to detect hotlinking. There are some hahahahahahahahahaha solutions, which place self-checking code in the hahahaha.

Personally, I like to use hahahahahahas and session IDs. The only problem is that not all browsers support these (and some users have them disabled).

Other than that, hahahaha and hahahaha are the only workarounds.

Dawgy · 04-10-2004, 10:35 PM

its interesting that a bit later the htaccess is working. our theory is some type of isp cache... this place does nothing but hotlink images, so maybe theyve setup a cache system to help keep images on their pages just a bit longer than would normally happen.... really weird... damn chinese...

is it worth redirecting the chinese traffic or just let them see a broken image in their html pages?

Baal · 04-10-2004, 10:36 PM

Quote:

Originally posted by Baal
It isn't that hard to fake Referrer info, which most .htaccess configs use to detect hotlinking. There are some hahahahahahahahahaha solutions, which place self-checking code in the hahahaha.

Personally, I like to use hahahahahahas and session IDs. The only problem is that not all browsers support these (and some users have them disabled).

Other than that, hahahaha and hahahaha are the only workarounds.

GOD DAMNIT, the meaningful parts of my post are all "hahahaha". Fuck it, I give up. I tried.

Wilber · 04-10-2004, 10:36 PM

Quote:

Originally posted by psyko514
does that work when someone hotlinks an image within an HTML page?
or will they only get a red x?

The RehahahahahaRule is the director. Everybody has a different want as
to what to show when hotlinked. Like I explained "traffic" is the commodity worth
most but some like to show a watermarked image with your domain name on it so
if you wanted to show an image instead you'd change the RehahahahahaRule director.

RehahahahahaRule .*[Jj][Pp][Gg]$|.*[Gg][Ii][Ff]$ http://www.bannerfarm/images/my.watermark.url.gif

BV · 04-10-2004, 10:37 PM

hahahahahahah works only with hahahahahaha

right?

hahahahahaha

Wilber · 04-10-2004, 10:39 PM

FUCK THAT FILTER SHIT!!!

RehahahahahaRule = RewriteRule

Wilber · 04-10-2004, 10:40 PM

Quote:

Originally posted by BV
hahahahahahah works only with hahahahahaha

right?

hahahahahaha

Quite ignoring your boyfriend, he wants a bj now.

Wilber · 04-10-2004, 10:42 PM

Quote:

Originally posted by Baal

GOD DAMNIT, the meaningful parts of my post are all "hahahaha". Fuck it, I give up. I tried.

I hear ya. GFY has taken simple typing and turned it into labor.

riosluts · 04-10-2004, 10:42 PM

yeah it would suck having someone leaching your 5mb movies off your server

Wilber · 04-10-2004, 10:45 PM

Quote:

Originally posted by Dawgy
is it worth redirecting the chinese traffic or just let them
see a broken image in their html pages?

Some claim chimp-traffic makes money but my experiences show the
chinese surf extremely fast compared to most and rarely whip out
a CC and pay.

I never got that far with chimp-traffic but if I was still doing it I'd show
them hentai, manga, and other toon shit on a 404. they love that shit
for some strange reason.

Wilber · 04-10-2004, 10:50 PM

A late thought.

I have some JavaScript code somewhere here that deals
with countries and redirects. If you want it say so and I post another page elsewhere.
Normally though I don't like throwing JavaScript because I
don't want that kind of code servered to any browsers.

mardigras · 04-10-2004, 11:16 PM

hahahahahaha!

RK · 04-10-2004, 11:36 PM

This is hilarious.
80% of the stuff posted in this thread is dead wrong.

1) Redirecting images to html pages is just plain stupid for img src. This means you will waste bandwidth sending the html page while the surfer will only see a red X.
2) There is no way to prevent a server or a smart user from downloading your images, just fake the user agent and referral info
3) Putting IPs of a web site that is hot linking you in your .htaccess file does only one thing: SLOWS DOWN YOUR WEB SITE. That function is designed to block visitors with that IP, not visitors coming from sites with that ip.
4) The basic .htaccess technique will block _all_ hot link attempts, there is no way around it since it would require changing the surfers browser
5) If #4 did not help it means your images are not being hot linked

andi_germany · 04-10-2004, 11:43 PM

I have seen many people using the .htacces ModREhahahahaha approach and they forget to protect .htaccess from being viewed.

If yoururl/.htaccess shows your .htaccess file you have a problem.

Myst · 04-10-2004, 11:48 PM

hit me up - ill be able to help you out

cayne · 04-11-2004, 05:50 AM

Hotlinking is the pain in the ass.
I have daily 2gb hotllinking traffic WITH activated protection.

04-10-2004, 10:01 PM	#1
Dawgy Confirmed User Join Date: Jul 2001 Posts: 5,856	a way around htaccess? (hotlinking) i have a hotlinker that seems to be getting around my htaccess. ive put in his domains, his IPs, even the exact url to the page linking my images, and the images still show up... ive cleared my local cache, etc, etc... i cant figure this one out. anyone know if its possible to go around htaccess? is something else going on here? __________________ the revolution is coming.

04-10-2004, 10:17 PM	#3
powerbubba Confirmed User Join Date: Jan 2004 Posts: 358	I think you're referring to fusker, and they use something called LWP to get around the htaccess issue, the research I did on this is over 2 years old, I forget some of the details but one solution someone gave me was to use some cgi mechanism to check referrer info on the fly (didn't, wasn't worth it) __________________ GreatGirls.com [email protected] CrowsCrypt.com - Exclusive High Quality Goth www.crowscrypt.com

04-10-2004, 10:31 PM	#7
zentz Confirmed User Industry Role: Join Date: Nov 2003 Posts: 8,053	find him and kill him __________________ Programs that owe me money ---- Epassporte.com ~ $2700 \| Protraffic.com ~ $2600 \| XonDemand.com ~ $3000 Email: [email protected]

04-10-2004, 10:35 PM	#9
Dawgy Confirmed User Join Date: Jul 2001 Posts: 5,856	its interesting that a bit later the htaccess is working. our theory is some type of isp cache... this place does nothing but hotlink images, so maybe theyve setup a cache system to help keep images on their pages just a bit longer than would normally happen.... really weird... damn chinese... is it worth redirecting the chinese traffic or just let them see a broken image in their html pages? __________________ the revolution is coming.

04-10-2004, 10:39 PM	#13
Wilber Confirmed User Join Date: May 2001 Location: De,Oh,Lei Posts: 1,295	FUCK THAT FILTER SHIT!!! RehahahahahaRule = Re<i></i>wr<i></i>it<i></i>e<i></i>Ru<i></i>le

04-10-2004, 10:04 PM	#2
KMR Stitch I am cool Join Date: Jul 2003 Posts: 14,494	Change hosts..

04-10-2004, 10:24 PM	#5
Wilber Confirmed User Join Date: May 2001 Location: De,Oh,Lei Posts: 1,295	You going at it a bit wrong. You want to let the hotlink attempt in because you can redirect the traffic for 404/403 sales. Let the hotlinkers do their thing because to you it's free traffic. I made a page here have a look at an example. It's too hard to post code here now with all the hahahahahah etc bullshit. example .htaccess

04-10-2004, 10:32 PM	#8
Baal Confirmed User Join Date: Jan 2002 Location: SoCal Posts: 696	It isn't that hard to fake Referrer info, which most .htaccess configs use to detect hotlinking. There are some hahahahahahahahahaha solutions, which place self-checking code in the hahahaha. Personally, I like to use hahahahahahas and session IDs. The only problem is that not all browsers support these (and some users have them disabled). Other than that, hahahaha and hahahaha are the only workarounds.

04-10-2004, 10:37 PM	#12
BV wtf Industry Role: Join Date: Sep 2001 Location: Bikini State, FL USA Posts: 10,914	hahahahahahah works only with hahahahahaha right? hahahahahaha

04-10-2004, 10:42 PM	#16
riosluts Confirmed User Join Date: Sep 2003 Posts: 5,250	yeah it would suck having someone leaching your 5mb movies off your server __________________

04-10-2004, 10:50 PM	#18
Wilber Confirmed User Join Date: May 2001 Location: De,Oh,Lei Posts: 1,295	A late thought. I have some Ja<i></i>va<i></i>Sc<i></i>ri<i></i>pt<i></i> code somewhere here that deals with countries and redirects. If you want it say so and I post another page elsewhere. Normally though I don't like throwing Ja<i></i>va<i></i>Sc<i></i>ri<i></i>pt<i></i> because I don't want that kind of code servered to any browsers.

04-10-2004, 11:16 PM	#19
mardigras Bon temps! Join Date: Feb 2003 Location: down yonder Posts: 14,194	hahahahahaha!

04-10-2004, 11:36 PM	#20
RK Confirmed User Join Date: Aug 2001 Location: In a Bunker Posts: 868	This is hilarious. 80% of the stuff posted in this thread is dead wrong. 1) Redirecting images to html pages is just plain stupid for img src. This means you will waste bandwidth sending the html page while the surfer will only see a red X. 2) There is no way to prevent a server or a smart user from downloading your images, just fake the user agent and referral info 3) Putting IPs of a web site that is hot linking you in your .htaccess file does only one thing: SLOWS DOWN YOUR WEB SITE. That function is designed to block visitors with that IP, not visitors coming from sites with that ip. 4) The basic .htaccess technique will block _all_ hot link attempts, there is no way around it since it would require changing the surfers browser 5) If #4 did not help it means your images are not being hot linked __________________ Does anyone look down here?

04-10-2004, 11:43 PM	#21
andi_germany Confirmed User Join Date: Oct 2002 Location: Germany Posts: 768	I have seen many people using the .htacces ModREhahahahaha approach and they forget to protect .htaccess from being viewed. If yoururl/.htaccess shows your .htaccess file you have a problem. __________________ SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.

04-10-2004, 11:48 PM	#22
Myst Confirmed User Join Date: Feb 2004 Location: Alberta, Canada Posts: 4,707	hit me up - ill be able to help you out

04-11-2004, 05:50 AM	#23
cayne My time is coming... Join Date: Jan 2004 Location: Europe --- eMail: service(at)badasscompany.com --- ICQ: 60288510 Posts: 7,476	Hotlinking is the pain in the ass. I have daily 2gb hotllinking traffic WITH activated protection. __________________ If lesbian anal is wrong, I don't want to be right.