|
| |
|
|
Xenon
Posts: 44
Joined: 12/8/2003
From: Madrid, Spain
Status: offline
 |
Preventing Hotlinking - 12/8/2004 14:12:22
How can you prevent Hotlinking (typing out the adress of an HTML file and accessing it)???? I have heard a method using .HTACCESS by looking on other forums but it didn't work. Is there another method without using Perl or other complicated languages???
_____________________________
.:JAva Terminal:. Webmaster
|
|
|
|
Xenon
Posts: 44
Joined: 12/8/2003
From: Madrid, Spain
Status: offline
|
RE: Preventing Hotlinking - 12/8/2004 14:52:09
Windows. I tried the {HTTP_REFERER} thing in the .HTACCESS file.
_____________________________
.:JAva Terminal:. Webmaster
| |
|
|
|
Xenon
Posts: 44
Joined: 12/8/2003
From: Madrid, Spain
Status: offline
|
RE: Preventing Hotlinking - 12/9/2004 8:23:22
Thanks. This is more or less what I wanted but I want to disable the hotlinking of webpages (.HTM files), not images. So will the intructions on the webpage that you put there, apply for HTM files aswell as images files??? Many thanks!
_____________________________
.:JAva Terminal:. Webmaster
| |
|
|
|
Kitka
Posts: 2520
Joined: 1/31/2002
From: Australia
Status: offline
|
RE: Preventing Hotlinking - 12/9/2004 8:45:37
Hotlinking of html files is most unusual. Would you give us an instance of what you mean (how it is being done)?
_____________________________
Kitka
**It is impossible to make anything foolproof because fools are so ingenious.**
| |
|
|
|
Xenon
Posts: 44
Joined: 12/8/2003
From: Madrid, Spain
Status: offline
|
RE: Preventing Hotlinking - 12/9/2004 17:17:05
Lets see:
On my webpage I have a simple Java Applet Login. So when the user is redirected to the correct page (after putting in the correct login and password) I don't want the user to:
-see the web adress of where he is taken
-the history to record the web adress of where he is taken
-be able to write in the web adress of the HTML file of where he is taken
Basicly, I want the user to go through the Java Applet to Login and then redirected to his/her page.
Thanks for help.
_____________________________
.:JAva Terminal:. Webmaster
| |
|
|
|
Kitka
Posts: 2520
Joined: 1/31/2002
From: Australia
Status: offline
|
RE: Preventing Hotlinking - 12/10/2004 1:44:53
Ok - what you are wanting is not related to "Hotlinking". As best as I can describe it, Hotlinking is stealing someone elses bandwidth. Say you have a picture called Mycat.jpg on your server, which is called Server A. But someone on Server B wishes to display that image on their page about cats called cats.htm (which resides on Server B). They "hotlink" to the image on Server A by using the full absolute path on the page, and they get the image displayed on their page when a visitors browser requests it from Server A, without using any of their own bandwidth or server disk space. Also, they get the visitor on their site/page, who has no knowledge that the picture actually belongs to you or your page.
The problem that you describe now is one you have raised previously here and some people have suggested solutions.
As I see it (and I am no expert) simple Javascripts are close to useless for keeping people out of password protected pages. They can be cracked easily, and also bypassed easily, simply by turning off Javascript in the browser. If you are serious at wanting to protect a page or folder, then I would suggest using .htaccess files to do it. Instructions here.
Good luck.
_____________________________
Kitka
**It is impossible to make anything foolproof because fools are so ingenious.**
| |
|
|
|
Kitka
Posts: 2520
Joined: 1/31/2002
From: Australia
Status: offline
|
RE: Preventing Hotlinking - 12/10/2004 2:16:15
More:
-see the web adress of where he is taken
I don't think that is possible unless you use chromeless popups. But why do you wish to hide the address?
-the history to record the web adress of where he is taken
I think you can control caching by placing meta tags on the destination page. eg:
<META HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE">
... but I don't think there is any way to interfere with a person's browser history.
-be able to write in the web adress of the HTML file of where he is taken
If the page is properly password protected, this doesn't matter. They would be prompted to Login before they could view it anyway.
Again if we understood exactly what it is that you are trying to achieve, it might make advising you a little easier.
Could we start with a URL?
_____________________________
Kitka
**It is impossible to make anything foolproof because fools are so ingenious.**
| |
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts
|
|
|
Printable Version 
k¥ 
