GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   Need Programming Help - Members Area Plugin (https://gfy.com/showthread.php?t=819902)

SkeetSkeet 04-04-2008 06:40 PM

Need Programming Help - Members Area Plugin
 
Ok ... Been at this for hours with no luck searching forums google or anything so here it goes. I am trying to figure out how to limit access to a page to traffic only coming from certain domains for a members area plugin we are working on. Basically you can't typein the domain and get anything, has to be linked from certain approved members areas or domains and what not. I have tapped everything I can think of and coming up dry. Any help greatly appreciated.

datatank 04-04-2008 07:05 PM

You can do it with htaccess

Nookster 04-04-2008 10:20 PM

Code:

$ref = $_SERVER['HTTP_REFERER'];
$pos = strpos($ref,'http://yoursite.com/members/');
$outp = ($pos === true) ? 'The referer is valid.' : 'Nice try.';

I think is what you're looking for, but remember the referer can be manipulated.

woj 04-04-2008 11:23 PM

Don't do it with referrer, it's way too amateurish... It may have been good enough 10 years ago, but now a days any idiot can hardcode referer='yoursite.com' into firefox and browse your plugin for free... people even collect and post links to poorly protected plugins like that on surfer forums... you will piss away ton of bandwidth this way...

bobby666 04-05-2008 04:17 AM

Quote:

Originally Posted by woj (Post 14030981)
Don't do it with referrer, it's way too amateurish... It may have been good enough 10 years ago, but now a days any idiot can hardcode referer='yoursite.com' into firefox and browse your plugin for free... people even collect and post links to poorly protected plugins like that on surfer forums... you will piss away ton of bandwidth this way...

they call it spoofing on the amateur porn boards

raymor 04-05-2008 12:36 PM

The reason you've had trouble finding it is is that there is no easy way to
do it with a few lines of .htaccess of whatever and have any level of security.
Soee old plugin providers did that, but those are the ones posted all over the
hacker boards and password sites and all, and who are also found in the
members' area of some legitimate looking sites although the webmaster
isn't paying the fee. We can set you up with a secure system based on
Strongbox technology, though.

Nookster 04-05-2008 01:25 PM

Quote:

Originally Posted by woj (Post 14030981)
Don't do it with referrer, it's way too amateurish... It may have been good enough 10 years ago, but now a days any idiot can hardcode referer='yoursite.com' into firefox and browse your plugin for free... people even collect and post links to poorly protected plugins like that on surfer forums... you will piss away ton of bandwidth this way...

notice what I mentioned about the referer. Read before you type.

SkeetSkeet 04-05-2008 01:26 PM

Quote:

Originally Posted by raymor (Post 14032248)
The reason you've had trouble finding it is is that there is no easy way to
do it with a few lines of .htaccess of whatever and have any level of security.
Soee old plugin providers did that, but those are the ones posted all over the
hacker boards and password sites and all, and who are also found in the
members' area of some legitimate looking sites although the webmaster
isn't paying the fee. We can set you up with a secure system based on
Strongbox technology, though.

as sad as this is ... i didn't even think yall could set something like that up ... never crossed my mind ... but yeah hit me up with some pricing info and we can def work that out

brandonstills 04-05-2008 03:07 PM

There's the referrer method mention but it has problems like mentioned above. You would have to do something where the plugin generates some type of authentication code and then that code is valid for a certain time period. You could even hash that code and combine it with their IP address so that code is tied to a given IP address only.


All times are GMT -7. The time now is 09:40 AM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123