TalkPHP
 
 
Account Login
Latest Articles
» The basic usage of PHPTAL, a XML/XHTML template library for PHP
» Vulnerable methods and the areas they are commonly trusted in.
» Simple way to protect a form from bot
» The Basics On: How Session Stealing Works
» How to keep your forms from double posting data
IRC Channel
IRC Speech Bubble Join the friendly bunch on IRC...
(#TalkPHP on Freenode)

...Also available via a web interface.

See this thread for information on the TalkPHP Free Hugs Initiative™. Subject to availability.
Associates
Associates
CSS Tutorials
Reply
 
LinkBack Thread Tools Search this Thread Display Modes
Old 07-17-2008, 12:37 PM   #1 (permalink)
The Visitor
 
Join Date: Jul 2008
Posts: 3
Thanks: 3
robert_hehn is on a distinguished road
Default People directly downloading files

Is there a way to make it where people can't just copy and paste a link to one of my files in their address bar, an example would be someone has a direct link to a bunch of my files on their forums. Is there a way to make it so the only way you can access the file is if you are directed to it from my own site or a site that I choose from? Thanks for any help.
robert_hehn is offline  
Reply With Quote
Old 07-17-2008, 01:54 PM   #2 (permalink)
Jim
The Addict
 
Jim's Avatar
 
Join Date: Nov 2007
Location: the Netherlands
Posts: 281
Thanks: 2
Jim is on a distinguished road
Default

Yes there is, the same technique is also used against image hotlinking: Google

This should help :)
__________________
Nunchaku! Who doesn't like martial arts? =)
Send a message via MSN to Jim Send a message via Skype™ to Jim
Jim is offline  
Reply With Quote
The Following User Says Thank You to Jim For This Useful Post:
robert_hehn (07-17-2008)
Old 07-17-2008, 02:45 PM   #3 (permalink)
The Contributor
 
buggabill's Avatar
 
Join Date: Jan 2008
Location: Maine, USA
Posts: 92
Thanks: 2
buggabill is on a distinguished road
Default

I found a nice little script over here that helps with this too.
__________________
-- Bill
"Why is it drug addicts and computer aficionados are both called users?" -Clifford Stoll
buggabill is offline  
Reply With Quote
The Following 2 Users Say Thank You to buggabill For This Useful Post:
ETbyrne (07-17-2008), robert_hehn (07-17-2008)
Old 07-17-2008, 02:51 PM   #4 (permalink)
The Visitor
 
Join Date: Jul 2008
Posts: 3
Thanks: 3
robert_hehn is on a distinguished road
Default

Well my problem isn't hotlinking. If you go to this link All Halo 3 .map files - Halo 3 Modding you will see that a user on that site posted direct urls to my files. I already have my site hotlinked protected so they can't post direct links to files, so now what they are doing is telling everyone the link so anyone can copy and paste the link in the address bar to get direct access to my files. Is there a way to make it so in order to access any files in a directory you have to be direct by my site and my site only? Not just copy and paste the direct link to my files from their site forums to their address bar to get the file.
robert_hehn is offline  
Reply With Quote
Old 07-17-2008, 02:56 PM   #5 (permalink)
how quixotic are you?
 
ETbyrne's Avatar
 
Join Date: Dec 2007
Location: Lapeer, MI
Posts: 445
Thanks: 37
ETbyrne is on a distinguished road
Default

Good find buggabill

@robert: use a combination of htaccess and PHP. For instance, have the download link go to a PHP file that downloads the file from the .htaccess protected directory. This will stop people from being able to directly download your files.
__________________
Dingo Web Systems > http://www.dingocode.com
My Website > http://www.evanbot.com
ETbyrne is offline  
Reply With Quote
The Following User Says Thank You to ETbyrne For This Useful Post:
robert_hehn (07-17-2008)
Old 07-17-2008, 03:13 PM   #6 (permalink)
The Visitor
 
Join Date: Jul 2008
Posts: 3
Thanks: 3
robert_hehn is on a distinguished road
Default

Thanks a bunch Jim, buggabill & ETbyrne. I will give this a try.
robert_hehn is offline  
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 11:32 PM.

 
     

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Inactive Reminders By Icora Web Design