Darren,
The answer to all your questions is yes. But as I said earlier the only
problem is that the user could still capture the screen and do what they
want with the image so I luck out there.
The scenario was very simple, the problem was not. The solution is even
simpler than you might think.
The thing is that the file is saved in the temp directory nothing I can do
about that, but the trick was simple to dynamically change the image as
needed, and if someone was to try to browse the cfm page within the temp
file nothing gets displayed. Disabling the RMB is easy, except if you don't
have JavaScript but that's easy enough to make the user switch it on before
being able to display the site.
Here is the img tag
<img src="DisplayImage.cfm?image=#ImageNo#">
DisplayImage.cfm is
<CFHEADER NAME="Pragma" VALUE="no-cache">
<cfif cgi.HTTP_REFERER contains "www.domainname.com">
<CFCONTENT TYPE="image/jpeg"
FILE="#Application.ImagePath#/file_#url.Image#.jpg">
<cfelse>
<CFCONTENT TYPE="image/jpeg"
FILE="#Application.ImagePath#/dummy.jpg">
</cfif>
Now the other thing I do is after I display the image using the <img> tag, O
add one more with a pixel of 1x1 that is of a dummy file, so that when they
go to the temp folder all the user sees is a 1x1 image in the file
DisplayImage.cfm?image=
Now combine this with javascript and the fact the DisplayImage stopd from
external sources, it easy to stop saving the image from the browser.
If anyone can pick holes in this then please let me know of anything, or
even an enhamcement would be good too.
Regards
Andrew Scott
Technical Consultant
NuSphere Pty Ltd
Level 2/33 Bank Street
South Melbourne, Victoria, 3205
Phone: 03 9686 0485 - Fax: 03 9699 7976
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of TRACEY,
Darren
Sent: Friday, 1 October 2004 12:09 PM
To: CFAussie Mailing List
Subject: [cfaussie] RE: Brain Drain Friday
Are you saying that you've made it so that if the user rightmouse clicks on
the image and selects 'Save Picture as' that this doesn't work? (I don't
just mean disabling right mouse clicks) Also, are you saying that if the
user examines the files in their browser cache, that the image is not there
either?
If you have done these things then I'd be terribly impressed, and would be
keen to know how you did it.
So far I think Steve's suggestion of having a flash file image loader seems
the most secure way of doing it, but also seems to be the most effort.
Likewise, I hope you're only joking when you say that you want to stop
screen captures from getting the image too. Next you'll be saying that you
need to stop users pointing a digital camera at their monitors and stealing
your images that way.
My opinion has always been that for the user to see an image in their
browser, you have to send them the file. Once you send them the file, they
have it.
If people stealing images from a website is that important, then maybe you
should only offer low quality, watermarked images.
Regards
Darren Tracey
Systems Analyst
HR Systems and FastTrack, Web and Integration Services
p: + 61 7 3232 4091 (x64091)
f: + 61 7 3232 4744
e: [EMAIL PROTECTED]
l: Lvl 9, 388 Queen St Brisbane QLD 4000
m: Suncorp IPC IT040, GPO Box 1453, Brisbane QLD 4000
> -----Original Message-----
> From: Andrew Scott [SMTP:[EMAIL PROTECTED]
> Sent: Friday, 1 October 2004 11:23
> To: CFAussie Mailing List
> Subject: [cfaussie] RE: Brain Drain Friday
>
> James,
>
> Yeah I had it working and didn't know it, the problem was the referrer
> was around the wrong way.... I can stop the image from linked too, I
> can stop the image from being saved by the browser. But the only thing
> I can't stop is the image from being captured using print screen... Oh
well.
>
>
>
> Regards
> Andrew Scott
> Technical Consultant
>
> NuSphere Pty Ltd
> Level 2/33 Bank Street
> South Melbourne, Victoria, 3205
>
> Phone: 03 9686 0485 - Fax: 03 9699 7976
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of James
> Macpherson
> Sent: Friday, 1 October 2004 11:04 AM
> To: CFAussie Mailing List
> Subject: [cfaussie] RE: Brain Drain Friday
>
> I'm not sure what you mean by this - you can certainly get a dummy
> image displayed if the url is typed in, and you can even do that using
> apache and no coldfusion (you can tell it to display a dummy image if
> there is no http referrer).
>
> As you mention though, there really IS no way to prevent images being
> saved
> - if someone really wants to do it they will.
>
> (though reading through your post again I might have misunderstood and
> what you're trying to do - might need more clarification)
>
> Regards,
>
> James
>
> > -----Original Message-----
> > From: Andrew Scott [mailto:[EMAIL PROTECTED]
> > Sent: Friday, 1 October 2004 10:45 AM
> > To: CFAussie Mailing List
> > Subject: [cfaussie] Brain Drain Friday
> >
> >
> >
> > Ok,
> >
> > There was a discussion the other day about caching of images, my
> > problem is that I am trying to stop the image from being saved on
> > the HD by the browser. Now I am aware at the moment that there is no
> > real way to stop the image from being saved, so it got me thinking.
> >
> > What if I was to use <img src="image.cfm?test=#count#> and then used
> > the image.cfm to see if the server was trying to place the file or
> > it was being browsed through the browser.
> >
> > Does anyone know what I mean by this, what I am trying to achieve
> > without any luck is that if the cf template served the file then it
> > would display the image being requested. But if it was to be typed
> > in the url directly then a dummy image would be displayed.
> >
> > Anyone got any ideas, the best that I can see at the moment is to
> > make the template displaying the image to be underneath the wwwroot
> > of the site. Just hoping that there might have been another way to do
this.
> >
> >
> >
> >
> >
> > Regards
> > Andrew Scott
> > Technical Consultant
> >
> > NuSphere Pty Ltd
> > Level 2/33 Bank Street
> > South Melbourne, Victoria, 3205
> >
> > Phone: 03 9686 0485 - Fax: 03 9699 7976
> >
> >
> >
> > ---
> > You are currently subscribed to cfaussie as:
> > [EMAIL PROTECTED]
> > To unsubscribe send a blank email to
> > [EMAIL PROTECTED]
> > Aussie Macromedia Developers: http://lists.daemon.com.au/
> >
>
> ---
> You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To
> unsubscribe send a blank email to
> [EMAIL PROTECTED]
> Aussie Macromedia Developers: http://lists.daemon.com.au/
>
>
>
>
> ---
> You are currently subscribed to cfaussie as:
> [EMAIL PROTECTED] To unsubscribe send a blank email to
> [EMAIL PROTECTED]
> Aussie Macromedia Developers: http://lists.daemon.com.au/
----------------------------------------------------------------------------
-------
This e-mail is sent by Suncorp-Metway Limited ABN 66 010 831 722 or one of
its related entities ("Suncorp").
Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13
11 55 or at suncorp.com.au.
The content of this e-mail is the view of the sender or stated author and
does not necessarily reflect the view of Suncorp. The content, including
attachments, is a confidential communication between Suncorp and the
intended recipient. If you are not the intended recipient, any use,
interference with, disclosure or copying of this e-mail, including
attachments, is unauthorised and expressly prohibited. If you have received
this e-mail in error please contact the sender immediately and delete the
e-mail and any attachments from your system.
If this e-mail constitutes a commercial message of a type that you no longer
wish to receive please reply to this e-mail by typing Unsubscribe in the
subject line.
---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED] To unsubscribe
send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/
---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/
