anti hotlink rewriting hole? - GoFuckYourself.com

s9ann0 · 08-16-2004, 05:56 PM

I just realised theres a huge f**king hole in my freehost anti hotlink rewriting when dealing with sites like fusker because they are putting the site url in the query string like this:

http://wanker.leech.com/thief.php?ht...site/pics.html
I'm using something like this
RewriteCond %{HTTP_REFERER} !^http://.*just404.com [NC]

so my rules match and let it thru because the domain is in the query string

I have to amend the rules I dunno how to right now I hate regexp

A C · 08-16-2004, 07:33 PM

i would be interested in knowing the fix for this as well

s9ann0 · 08-17-2004, 02:34 AM

I changed it to:

RewriteCond %{HTTP_REFERER} !^http://[a-z,A-Z,0-9]+.sexwebsites.com [NC]

08-16-2004, 05:56 PM	#1
s9ann0 Confirmed User Join Date: Sep 2001 Location: Boston Posts: 4,873	anti hotlink rewriting hole? I just realised theres a huge f*king hole in my freehost anti hotlink rewriting when dealing with sites like fusker because they are putting the site url in the query string like this: http://wanker.leech.com/thief.php?ht...site/pics.html I'm using something like this RewriteCond %{HTTP_REFERER} !^http://.just404.com [NC] so my rules match and let it thru because the domain is in the query string I have to amend the rules I dunno how to right now I hate regexp

08-16-2004, 07:33 PM	#2
A C Confirmed User Join Date: Dec 2002 Location: Im here, and there Posts: 1,637	i would be interested in knowing the fix for this as well __________________ Do you have a "Exit here - if under 18" link on your warningpage? Chances are you are linking to yahoo/google/disney etc. Those days are over, signup at www.warningpages.com to get PAID for this traffic that has been wasted by so many for years! icq#777970

08-17-2004, 02:34 AM	#3
s9ann0 Confirmed User Join Date: Sep 2001 Location: Boston Posts: 4,873	I changed it to: RewriteCond %{HTTP_REFERER} !^http://[a-z,A-Z,0-9]+.sexwebsites.com [NC]