[PHP] Re: image location hiding techniques

[Chuck Anderson]

hbeaumont hbeaumont wrote:


Hi,

I have a site with images that I want people to download but not have
the direct path to. ie. I do not want them to be able to just view the
source, find the dir and then download everything or direct link to
them.

However I can see no way to do this other than keeping the images on
disk, having a php script read them and then spit them out. example:

view.php?92348924  where 92348924  is a code that translates to the
image on disk.

Can anyone think of a better method? If not, what is the most
efficient way to do this (ie. avoid the most i/o)

Thanks!


P.S. I also realize I could use .htaccess to stop direct linking and
turn off directory indexes. Still I think there might be some other
problems with .htaccess
 

I know it's not exactly what you're asking for, but here's a great php 
based defense against hotlinking.


http://www.alistapart.com/articles/hotlinking/


--
*
Chuck Anderson • Boulder, CO
http://www.CycleTourist.com
Integrity is obvious.
The lack of it is common.
*

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: image location hiding techniques

[David Dorward]

hbeaumont hbeaumont wrote:

> I have a site with images that I want people to download but not have
> the direct path to. ie. I do not want them to be able to just view the
> source, find the dir and then download everything or direct link to
> them.

Turn off directory indexes or put an index.html file in there.
Use mod_rewrite to reject requests from referers starting with http but not
being your site.

> P.S. I also realize I could use .htaccess to stop direct linking and
> turn off directory indexes. Still I think there might be some other
> problems with .htaccess

Problems like what?

-- 
David Dorward      
 Home is where the ~/.bashrc is

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php