NEw fusker = ixtractor.com -> impossible to stop from hotlinking !

**KrisKross** · 08-29-2006, 06:07 PM

I know very little about .htaccess, but can't you just block those with no header referrer?

**CHMOD** · 08-29-2006, 06:09 PM

Originally posted by KrisKross

I know very little about .htaccess, but can't you just block those with no header referrer?

Yes you can.

Problem is that you will block 20% of your surfers...
Many Firewall and anti-virus now sets Header Referer to 0 by default.

**2HousePlague** · 08-29-2006, 06:09 PM

lolol -- CLASSIC --

Internet Explorer Users:
1) Got to http://www.mozilla.org/products/firefox/.
2) Download FireFox.
3) Install FireFox.
4) Follow FireFox instructions above.

2hp

**Adult Warden** · 08-29-2006, 06:10 PM

no offense to CHMOD...but hahah @ gfy being referral

HERE COMES SURFER TRAFFIC

**CHMOD** · 08-29-2006, 06:19 PM

Originally posted by Adult Warden

no offense to CHMOD...but hahah @ gfy being referral

HERE COMES SURFER TRAFFIC

I know. But it doesn't help to do as if the problem doesn't exist.

There are 98% of bullshitters here... But it would be nice if the rest could work to find something against this shit.

**Brujah** · 08-29-2006, 06:30 PM

He forgot Opera.

In Opera, hit F12 (Quick Prefs), uncheck "Enable Referrer Logging"

**GrouchyAdmin** · 08-29-2006, 06:35 PM

Uhm, just deny no referrers, people. This isn't rocket science. This is entirely off the cuff, so if it shits on you, sorry.

RewriteRule %{HTTP_REFERER} ^$
RewriteRule .*\.(gif|jp(?e)g)$ http://yourserver.com/no.gif [NC, R]

[Tard Edit: As mentioned above, this will fuck people who don't send referers, but they generally do this on purpose..]

**MaddCaz** · 08-29-2006, 06:36 PM

good diddeal

**Brujah** · 08-29-2006, 06:37 PM

Originally posted by toonpornblog

Uhm, just deny no referrers, people. This isn't rocket science. This is entirely off the cuff, so if it shits on you, sorry.

RewriteRule %{HTTP_REFERER} ^$
RewriteRule .*\.(gif|jp(?e)g)$ http://yourserver.com/no.gif [NC, R]

Was already suggested.

He decided that isn't a valid option for his needs since it will also block 20% of his legit visitors.

**CHMOD** · 08-29-2006, 06:38 PM

Originally posted by toonpornblog

Uhm, just deny no referrers, people. This isn't rocket science. This is entirely off the cuff, so if it shits on you, sorry.

RewriteRule %{HTTP_REFERER} ^$
RewriteRule .*\.(gif|jp(?e)g)$ http://yourserver.com/no.gif [NC, R]

Would help if you could read all posts before replying.

**GrouchyAdmin** · 08-29-2006, 06:40 PM

Originally posted by Brujah

Was already suggested.

He decided that isn't a valid option for his needs since it will also block 20% of his legit visitors.

Yeah. I forgot to put that in before I hit submit. I also forgot the code tags. For most of us, though, they're non-paying traffic anyhow. Hell, it's simple enough, you can redirect them to the root page. If they were sent to steal shit, then they get your home page. If they have referrers turned off, well, then it's up to you. Set a cookie. It's still not rocket science. ;)

**SmokeyTheBear** · 08-29-2006, 06:41 PM

i suggest using a key to rename the folder the pics reside in everyday , but of course the pages that use the pics would have to be built around the same structure. wouldnt be hard to build really

**SmokeyTheBear** · 08-29-2006, 06:43 PM

plus as mentioned that "no referrer " traffic your worried about prob aint buying anything anyways

**Brujah** · 08-29-2006, 06:45 PM

Originally posted by SmokeyTheBear

plus as mentioned that "no referrer " traffic your worried about prob aint buying anything anyways

I see a lot of signups that show up as NA or Bookmark referrers. I wouldn't block them or treat them differently either.

**CHMOD** · 08-29-2006, 06:48 PM

Originally posted by toonpornblog

Yeah. I forgot to put that in before I hit submit. I also forgot the code tags. For most of us, though, they're non-paying traffic anyhow. Hell, it's simple enough, you can redirect them to the root page. If they were sent to steal shit, then they get your home page. If they have referrers turned off, well, then it's up to you. Set a cookie. It's still not rocket science. ;)

I am maybe missing something here...

If a legit surfer with Norton installed is trying to visit my website.
He's coming, let's say from Google.
Won't my .htaccess block him in this case ?

And why would that surfer be a non buyer ?

**SmokeyTheBear** · 08-29-2006, 07:02 PM

post an url to a hotlink protected pic and ill show you how to get around it..

**studiocritic** · 08-29-2006, 07:10 PM

Originally posted by CHMOD

I am maybe missing something here...

If a legit surfer with Norton installed is trying to visit my website.
He's coming, let's say from Google.
Won't my .htaccess block him in this case ?

This is correct, assuming Norton blocks referrers by default.

I don't know which programs do/don't, but I do see a very significant amount (20-25%) on my mainstream site who don't pass referrers even to the image files within the site.

**venus** · 08-29-2006, 08:15 PM

this will block them

put your pictures in a sub directory under the galleries directory, put a htaccess in the sub directory and use referring url,in the htaccess put the referring url as your doman name

**ne0** · 08-29-2006, 08:23 PM

# iptables -A INPUT -p tcp --dport 80 -s 64.105.122.0/24 -d 0/0 -j DROP

**Arty** · 08-30-2006, 04:04 AM

Few months ago I did an addon for one of my clients, something similar to what smokey suggested, for one of my clients. Basicaly, it rotates image folder every hour (can me more or less frequent).

F.x. That's the current image link http://static01.vapshare.com/f868ed4...54/126835.jpeg

You may check it out at http://www.vapshare.com/126835/40791...ottest105.html

Far more effective than htaccess+referrer

**darksoul** · 08-30-2006, 04:27 AM

I would redirect the non ref requests to *******
they'll remove your images in a sec

**rowan** · 08-30-2006, 04:37 AM

Couple of solutions...

1) Rotate your image filenames periodically

2) Set a cookie on your thumb/gallery page and require it to be present to load a full sized image

**Pete-KT** · 08-30-2006, 04:43 AM

Did you try the link at the top

"Webmasters, if you would like your site removed from iXtracor please contact us."

**Fabien** · 08-30-2006, 04:56 AM

If you can't beat 'hem, join 'hem

Shit i want this software !!!

**Hooligan** · 08-30-2006, 05:34 AM

Originally posted by CHMOD

I contacted webair 4 times regarding this.

Looks like they can't stop them.

**RawAlex** · 08-30-2006, 08:48 AM

I won't even mention who the two major money makers are on that site (but if I did, they would be AFF and Adbrite... always the same two companies on sites like these for some reason).

Hotlinking is an acceptable business practice?

**MattO** · 08-30-2006, 08:58 AM

Originally posted by SmokeyTheBear

post an url to a hotlink protected pic and ill show you how to get around it..

Try the pics in this gallery:

http://www.adultpulse.com/galleries/atkhairy/Anna

**CHMOD** · 08-30-2006, 09:01 AM

Originally posted by Pete-KT

Did you try the link at the top

"Webmasters, if you would like your site removed from iXtracor please contact us."

Problem is that most similar sites don't offer this option.

Originally posted by SplitNeo

# iptables -A INPUT -p tcp --dport 80 -s 64.105.122.0/24 -d 0/0 -j DROP

I don't understand japonese.

Originally posted by Arty

Few months ago I did an addon for one of my clients, something similar to what smokey suggested, for one of my clients. Basicaly, it rotates image folder every hour (can me more or less frequent).

F.x. That's the current image link http://static01.vapshare.com/f868ed4...54/126835.jpeg

You may check it out at http://www.vapshare.com/126835/40791...ottest105.html

Far more effective than htaccess+referrer

There is something I am missing here...

If, in example, I am using Ixtractor to view my pics now. It will hotlink the pictures wherever they are... Now if the script changes the image folder name in, let's say 30 minutes... When someone will use Ixtractor in 35 minutes he will simply see hotlinked images from the new named folder won't he ?

**CHMOD** · 08-30-2006, 09:03 AM

Originally posted by MattO

Try the pics in this gallery:

http://www.adultpulse.com/galleries/atkhairy/Anna

Awesome !

How did you do ?

EDIT : Looks like you just bloked non header referer browser...

When I visit this gallery with my Firefox browser : I don't see any images either...

**MattO** · 08-30-2006, 09:07 AM

Originally posted by CHMOD

Awesome !

How did you do ?

Windows server IIS plugin called HotLinkBlocker.

**RawAlex** · 08-30-2006, 09:17 AM

Blocknig non-header referer just means that 20% of your real surfers won't get any images either. Not really a good way to do things.

The best way to do things is to complain directly to the sponsors that are paying for this site to stay up, as well as reporting them to their host, and so on up the line.

You might even drop a dime on them to the DoJ about 2257 documents. I somehow doubt they have a single piece of 2257 for any model on their site.

**seeric** · 08-30-2006, 09:17 AM

nothing is impossible. it can be blocked, i'm sure of it.

**tenderobject** · 08-30-2006, 09:20 AM

Originally posted by Fabien

If you can't beat 'hem, join 'hem

Shit i want this software !!!

hahahaha i love this one

**Dirty Dane** · 08-30-2006, 09:27 AM

spam/bombard them until they block your domain

**borked** · 08-30-2006, 10:12 AM

...sorry for the japanese, but this will solve any of those problems

Code:

<img src="/display.php?id=34" border="0">

then

Code:

<?

$connection=@mysql_connect(...);

@mysql_select_db(...);

$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];

$rawdb=@mysql_query ($query,$connection);

if($rawdb AND @mysql_num_rows($rawdb)>0){

  $array=@ mysql_fetch_array($result);

  if (!empty($array["fileContents"])){

    // Output the MIME header

    header("Content-Type: ".$array["mime"]}");

    // Output the image

    echo $array["file"];

  }else{

    // something else...

  }

  @mysql_free_result($rawdb);

}else{

  // something else...

}

@mysql_close($connection);

?>

**borked** · 08-30-2006, 10:18 AM

Originally posted by toonpornblog

Set a cookie. It's still not rocket science. ;)

Actually, this is by far the simplest! Even a simple session cookie would suffice.

**RawAlex** · 08-30-2006, 10:44 AM

Setting a cookie or otherwise burdening your machine for your regular customers is just another cost of this type of theft. Why tolerate the theft? Why allow the sponsors to keep paying these people?

I have sent emails and messages to adbrite, AFF, and others on this issue, I will be interested to hear the comments back.

**Manowar** · 08-30-2006, 10:58 AM

bump for this

**s9ann0** · 08-30-2006, 11:02 AM

lamers lamers lamers

**CHMOD** · 08-30-2006, 11:02 AM

Originally posted by borked

Actually, this is by far the simplest! Even a simple session cookie would suffice.

What about IE6 wich doesn't allow cookies by default ?

Originally posted by borked

...sorry for the japanese, but this will solve any of those problems

Code:

<img src="/display.php?id=34" border="0">

then

Code:

<?

$connection=@mysql_connect(...);

@mysql_select_db(...);

$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];

$rawdb=@mysql_query ($query,$connection);

if($rawdb AND @mysql_num_rows($rawdb)>0){

  $array=@ mysql_fetch_array($result);

  if (!empty($array["fileContents"])){

    // Output the MIME header

    header("Content-Type: ".$array["mime"]}");

    // Output the image

    echo $array["file"];

  }else{

    // something else...

  }

  @mysql_free_result($rawdb);

}else{

  // something else...

}

@mysql_close($connection);

?>

I don't know if it works but I surely can't do this myself.. I don't know shit about PHP... If it is the only solution, I'll have to hire someone.

**s9ann0** · 08-30-2006, 11:11 AM

why not just change the rewrite rules to umm... not allow blank referers from mozilla? I dunno something like that

**s9ann0** · 08-30-2006, 11:15 AM

something like this might work:

Code:

RewriteEngine On
RewriteCond %{HTTP_REFERER}	=""
RewriteCond %{HTTP_USER_AGENT} 	!^.*MSIE
RewriteCond %{REQUEST_URI}	!\.*htm$				[NC]
RewriteCond %{REQUEST_URI}	!\.*html$				[NC]
RewriteCond %{REQUEST_URI}	!\.*/$
RewriteRule ^(.*)$		[F,L]

RewriteCond %{HTTP_REFERER}	!=""
RewriteCond %{HTTP_REFERER}	!^http://mydomain.com			[NC]
RewriteCond %{HTTP_REFERER}	!^http://[a-z,A-Z,0-9,\-]+.mydomain.com	[NC]
RewriteCond %{REQUEST_URI}	!\.*htm$				[NC]
RewriteCond %{REQUEST_URI}	!\.*html$				[NC]
RewriteCond %{REQUEST_URI}	!\.*/$
RewriteRule ^(.*)$	[F,L]

**SpeakEasy** · 08-30-2006, 11:24 AM

Originally posted by CHMOD

They are burning my bandwith and maybe yours...

Forget the .htaccess it doesn't work !

HERE's WHY

I contacted webair 4 times regarding this.
Looks like they can't stop them.

LMAO...too funny

**The Sultan Of Smut** · 08-30-2006, 11:36 AM

Originally posted by RawAlex

The best way to do things is to complain directly to the sponsors that are paying for this site to stay up, as well as reporting them to their host, and so on up the line.

Bravo! I'm always a fan of voting with my wallet so pulling down some banners from sponsors that choose to do business with this type of site is usually the solution I prefer. Since these sites obviously don't own the license or copywrite for the material they're using so I don't see why a host would have a legal problem taking down the site; especially of the host does business with the people that are being victimized.

Originally posted by RawAlex

You might even drop a dime on them to the DoJ about 2257 documents. I somehow doubt they have a single piece of 2257 for any model on their site.

Oooooo what a fiendishly good idea ;)

**CHMOD** · 08-30-2006, 11:38 AM

Originally posted by spanno

something like this might work:

Code:

RewriteEngine On
RewriteCond %{HTTP_REFERER}	=""
RewriteCond %{HTTP_USER_AGENT} 	!^.*MSIE
RewriteCond %{REQUEST_URI}	!\.*htm$				[NC]
RewriteCond %{REQUEST_URI}	!\.*html$				[NC]
RewriteCond %{REQUEST_URI}	!\.*/$
RewriteRule ^(.*)$		[F,L]

RewriteCond %{HTTP_REFERER}	!=""
RewriteCond %{HTTP_REFERER}	!^http://mydomain.com			[NC]
RewriteCond %{HTTP_REFERER}	!^http://[a-z,A-Z,0-9,\-]+.mydomain.com	[NC]
RewriteCond %{REQUEST_URI}	!\.*htm$				[NC]
RewriteCond %{REQUEST_URI}	!\.*html$				[NC]
RewriteCond %{REQUEST_URI}	!\.*/$
RewriteRule ^(.*)$	[F,L]

I am no programmer but this is the kind of .htaccess code I was waiting for...
Don't know if it will be effective tough...

**Broda** · 08-30-2006, 11:39 AM

Originally posted by borked

...sorry for the japanese, but this will solve any of those problems

Code:

<img src="/display.php?id=34" border="0">

then

Code:

<?

$connection=@mysql_connect(...);

@mysql_select_db(...);

$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];

$rawdb=@mysql_query ($query,$connection);

if($rawdb AND @mysql_num_rows($rawdb)>0){

  $array=@ mysql_fetch_array($result);

  if (!empty($array["fileContents"])){

    // Output the MIME header

    header("Content-Type: ".$array["mime"]}");

    // Output the image

    echo $array["file"];

  }else{

    // something else...

  }

  @mysql_free_result($rawdb);

}else{

  // something else...

}

@mysql_close($connection);

?>

This is the solution I would suggest.

All that nonsense about constantly renaming your folders, and redirecting non-ref-url traffic.. do any of you guys discussing this actually submit free sites or galleries? jeeez....

**borked** · 08-30-2006, 12:04 PM

Originally posted by Broda

This is the solution I would suggest.

All that nonsense about constantly renaming your folders, and redirecting non-ref-url traffic.. do any of you guys discussing this actually submit free sites or galleries? jeeez....

just in case anyone was going to try and implement this, don't jsut do it blindly - for eg in my example, you're passing a GET variable directly to mysql which is always a bad idea....
so at least replace

Code:

$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];

with

Code:

$query="SELECT mime, file FROM images WHERE id=".mysql_real_escape_string($_GET["id"]);

Don't want to opening up a security hole there now

**borked** · 08-30-2006, 12:46 PM

OK, this js shit works - no dbase no nothing, just javascript. Call it from an iframe or whatever you want...not sure, but prolly able to call it as a header to all images from htaccess....either way the code works and is simple

Code:

<script language=javascript>
//Beginning of "test.js" file
var accepted_domains=new Array("yourdomain.com","www.yourdomain.com")

var domaincheck=document.location.href //retrieve the current URL of user browser
var accepted_ok=false //set acess to false by default

if (domaincheck.indexOf("http")!=-1){ //if this is a http request
for (r=0;r<accepted_domains.length;r++){
if (domaincheck.indexOf(accepted_domains[r])!=-1){ //if a match is found
accepted_ok=true //set access to true, and break out of loop
break
}
}
}
else
accepted_ok=true

if (!accepted_ok){
alert("Fuck off linking to my images!!")
history.back(-1)
}

</script>
<img src="image123.jpg">

**PussyTeenies** · 08-30-2006, 12:51 PM

a firewall?

NEw fusker = ixtractor.com -> impossible to stop from hotlinking !

NEw fusker = ixtractor.com -> impossible to stop from hotlinking !

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment