Limiting Access - Codewalkers

Codewalkers Forums Sponsor:

You eat, breathe and sleep innovation. Build your mobile intelligence with BlackBerry® experts this July. Register Today!

December 12th, 2004, 08:13 AM

r_palkovic

Join Date: Apr 2007

Location: San Diego, CA USA

Posts: 129

Time spent in forums: < 1 sec
Reputation Power: 2

Limiting Access

I'm running:
Windows 2000
Apache2 (Windows Binaries)

I need to:
Restrict anyone from directly viewing any images stored unless they are linked in a webpage. http://www.somelink.com/image.jpg will not show, but if that same link is in an <img> tag, it should show.

I have tried:
Restricting access w/ .htaccess files w/ apache. Yes, my server supports them. I was able to lock them down, but I did just a good job that you have to have a password to view them at all, and they won't display in <img> tags. No good, obciously.

Any help on the matter would be greatly appreciated!

December 13th, 2004, 12:48 AM

rehfeld_dot_us

Join Date: Apr 2007

Posts: 825

Time spent in forums: < 1 sec
Reputation Power: 2

RE: Limiting Access

you cant.

you can however, restrict viewing to people who are logged in, or to those people who you have started for example a php session for.

for example, your img tags would look like this

<img src="image_server.php?image=foo.jpg">

then

php Code:

Original - php Code
session_start(); if (empty($_SESSION['can_view_images'])) { exit; } if (empty($_GET['image'])) { exit; } $image = $_GET['image']; $ext = end(explode('.', $image));// get file ext header('Content-type: image/'.$ext); // send mime header readfile('images/'.$image); // output image

 
 
session_start();
 
if (empty($_SESSION['can_view_images'])) {
    exit;
}
 
if (empty($_GET['image'])) {
    exit;
}
 
$image = $_GET['image'];
 
$ext = end(explode('.', $image));// get file ext
 
header('Content-type: image/'.$ext); // send mime header
 
readfile('images/'.$image); // output image

and you would want to do some security checks as well,
in case someone manually entered somthing like this into the url

?image=../../usr/etc/pwd

December 14th, 2004, 04:05 PM

sleighboy

Join Date: Apr 2007

Posts: 49

Time spent in forums: < 1 sec
Reputation Power: 2

RE: Limiting Access

Red this article. It has the code you want.

http://html.codenewbie.com/articles/html/1453/htaccess__Image_Hotlinking_Prevention-Page_1.html

Viewing: Codewalkers Forums > Other Technologies > Server Administration > Limiting Access

« Previous Thread | Next Thread »

Thread Tools	Search this Thread
Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts vB code is On Smilies are On [IMG] code is On HTML code is Off

View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox

Forum Jump