[ABD] Prevent hotlinking

stokerpiller · Post by **stokerpiller** » Sun Jul 27, 2008 7:00 am

MOD title: Prevent hotlinking
MOD description: Here is a little addon for Your phpBB3 board that prevents hotlinking and people stealing Your bandwidth.
It affects all files that are uploaded with the "Upload attachment" function.
Uploaded Avatars, attached files and attached images are included
This way it only causes very little server load because it only checks files placed in the download folder.
But it is possible to protect everything

MOD version: 1.0.1
phpBB version: Tested on 3.0.0 - 3.0.4
Installation Time: 4 minutes
MOD Format: None at the moment
MOD download and demo: http://www.phpbb3bbcodes.com/prevent-ho ... -t431.html

tupeu · Post by **tupeu** » Tue Jul 29, 2008 11:34 am

this mod makes the avatars not show up anymore

and the atachments are messad up...

stokerpiller · Post by **stokerpiller** » Tue Jul 29, 2008 11:53 am

tupeu wrote:this mod makes the avatars not show up anymore
and the atachments are messad up...

Did You follow the guide?
It sounds like You forgot to edit this line in the .htaccess file before You uploaded it to the download folder:

Code: Select all

RewriteCond %{HTTP_REFERER} !^http://(.+.)?yourdomain.com/ [NC]

Please replace yourdomain.com with the name of Your domain.

Did that solve the problem?

tupeu · Post by **tupeu** » Tue Jul 29, 2008 12:11 pm

stokerpiller wrote: Did You follow the guide?
It sounds like You forgot to edit this line in the .htaccess file before You uploaded it to the download folder:
Code: Select all
RewriteCond %{HTTP_REFERER} !^http://(.+.)?yourdomain.com/ [NC]
Please replace yourdomain.com with the name of Your domain.

Did that solve the problem?

unfortunately not !

the images atached to any topic and the atachments don`t work even if i delete the download folder and clear the cache, i just get the The requested document was not found on this server.
it goes to /download/file.php?id=123

my atachments are in the /files folder and your mod is in /download folder
that download folder has only 1 file, the .htaccess
the image file is in the root folder

why i don`t see the avatars even if i delete the download folder and all the files related to this mod?

and i use php 5.2.4

stokerpiller · Post by **stokerpiller** » Tue Jul 29, 2008 12:36 pm

I know that attachments are placed in the files folder, but they are shown as placed in the download folder.
Therefore the .htaccess file should be uploaded to the download folder as explained in the guide.

If You have uploaded it to the files folder, You have overwritten the .htaccess file that allready was there.
The .htaccess file in the files folder looks like this:

Code: Select all

<Files *>
	Order Allow,Deny
	Deny from All
</Files>

Please restore it.

Have You deleted Your entire download folder?

I will help You out if You write EXACTLY what You have done.

tupeu · Post by **tupeu** » Tue Jul 29, 2008 12:43 pm

lol, i think i found the problem...don`t ask

i moved my site to another host and forgot a file...

this was my mistake, sorry for the false alarm but i was desperate cause i have over hundreds of atachments and i though i will have to upload them again !

thank you !

and most important:

Your MOD is working !

stokerpiller · Post by **stokerpiller** » Tue Jul 29, 2008 1:52 pm

Glad You figured it out

stokerpiller · Post by **stokerpiller** » Thu Aug 14, 2008 12:39 pm

Still need people to test this.

AMH99 · Post by **AMH99** » Mon Aug 18, 2008 2:40 am

Does not work for me!

I have a board that was upgraded from the V2 board and all the files are in the /files/ directory. I am still being hotlinked.

stokerpiller · Post by **stokerpiller** » Mon Aug 18, 2008 5:09 am

AMH99 wrote:Does not work for me!

I have a board that was upgraded from the V2 board and all the files are in the /files/ directory. I am still being hotlinked.

Yes, phpBB3 puts the attachments in the files folder. But that doesn't matter, it works anyway because the link says the download folder

Can You post some of Your attachments her?
Both zip and with the Img BBCode.

Dr.Death · Post by **Dr.Death** » Mon Aug 18, 2008 3:47 pm

Nice MOD.

Works fine.

Try to hotlink this image:

http://www.lpi-clan.de/viewtopic.php?f=3&t=3718
http://www.lpi-clan.de/download/file.php?id=142

Only phpbb.com , phpbb.de and lpi-clan.de are allowed to hotlink this image.

AMH99 · Post by **AMH99** » Mon Aug 18, 2008 11:36 pm

bridge.net/forum/download.php?id=375

and

bridge.net/forum/download/file.php?id=2415

stokerpiller · Post by **stokerpiller** » Tue Aug 19, 2008 4:41 am

Dr.Death -> Thanks for testing.

AMH99 -> I cant follow Your links. One gives a white page and one ask if I want to install phpBB?
So it looks like it is working except it should show the no hotlink image.
Did You upload it to the root of Your forum?
Have You edited the .htaccess file correct - can You post the content here.

stokerpiller · Post by **stokerpiller** » Sun May 17, 2009 9:47 am

Mod denied validation. No further development can be done.
Even though it works perfect, it is now abandonned.

RMcGirr83 · Post by **RMcGirr83** » Sun May 17, 2009 10:46 am

stokerpiller wrote:Mod denied validation.

Why?