We are not Men, We are Devo
Quote:
Originally posted by edg
Is that 5mb imposed by upload_max_filesize? If so, look at the PHP documentation, it can be changed by either the ini OR PHP_INI_PERDIR - so you can get round it using .htaccess (I'm making presumptions on the part of your host here though, they may not allow .htaccess files).
If they do, however, just create a file called '.htaccess' with 'php_value upload_max_filesize <byte value, eg. 100mb =104,857,600>' and you should be able to overide those restrictions.
2Mb isn't a suprise though, that's the default setting...
edg
I would have never thought I'd ask this type of question in front of my radical skiing peers...
I've put a htaccess file on my server...
RewriteEngine On
RewriteCond %{HTTP_REFERER} !^http://yourdomain.com [NC]
RewriteCond %{HTTP_REFERER} !^http://www.yourdomain.com [NC]
RewriteRule [^/]+.(.*)$ http://www.yourdomain.com/accessdenied.gif [R,L]
with my domain URL string added to replace the stock URL.
It still lets me display the image from a browser using the hotlink, which I want to stop. I only want people to hit the image from my URL which has password protected access to those links. If someone were to "find" the link directly they could view the image file. BAD!
This web page talks about it:
thesitewizard.com/archive/bandwidththeft
but the code I used is shown above, it's from the creator of the image asset library that I use.
My questions:
Is that code wack?
Is it the Apache Servers choice to allow htaccess files? config file?
Is it possible to "find" hotlinks on the web to images? Some type of war dialer URL string creator/tester?
Am I paranoid?
Is big Brother watching?
Re: We are not Men, We are Devo
Quote:
Originally posted by Baconzoo
I would have never thought I'd ask this type of question in front of my radical skiing peers...
I've put a htaccess file on my server...
RewriteEngine On
RewriteCond %{HTTP_REFERER} !^http://yourdomain.com [NC]
RewriteCond %{HTTP_REFERER} !^http://www.yourdomain.com [NC]
RewriteRule [^/]+.(.*)$ http://www.yourdomain.com/accessdenied.gif [R,L]
with my domain URL string added to replace the stock URL.
It still lets me display the image from a browser using the hotlink, which I want to stop. I only want people to hit the image from my URL which has password protected access to those links. If someone were to "find" the link directly they could view the image file. BAD!
This web page talks about it:
thesitewizard.com/archive/bandwidththeft
but the code I used is shown above, it's from the creator of the image asset library that I use.
My questions:
Is that code wack?
Is it the Apache Servers choice to allow htaccess files? config file?
Is it possible to "find" hotlinks on the web to images? Some type of war dialer URL string creator/tester?
Am I paranoid?
Is big Brother watching?
1). Never bothered blocking external access to my images. If the area in which the images are stored are already password protected, then the direct link shouldn't work anyway.
This code should work :
RewriteEngine On
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://aaa.com.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.aaa.com.*$ [NC]
RewriteRule .*\.(gif|GIF|jpg|JPG|swf|SWF)$ http://www.aaa.com/bad.gif [R]
You can see there are subtle differences, but these are important, I feel.
If you're using IE type this out into a text editor, as sometimes your can get odd gremlins from copy/paste.
2). Yes, your host (If you're not it yourself) can set whether or not to accept .htaccess files, but it's so limiting not to allow them I doubt they'd do that. Even so, an email to tech support can clear that up.
3). I'm sure it is, but it'd be an awfully large job - are your images that precious?
4). No, they're really after you.
5). Yes.
Hope this helps,
edg
