Re: [mv] Blocking referrers from stealing images

["Christopher P. Lindsey" <lindsey@mallorn.com>]

******    message to minivend-users from "Christopher P. Lindsey" <lindsey@mallorn.com>     ******

> Is there any easy way (either thru Minivend or thru Apache) to block all 
> sites not my own from linking to our server images?

I've done this, but it's a convoluted path and doesn't work with all 
browsers (i.e. Opera, which allows people to turn off HTTP_REFERER).

Under Apache, you can use mod_rewrite to perform actions based on certain
environment variables...  So if HTTP_REFERER doesn't match a certain
regex, return an embarassing graphic. 

I've taken the more circuitous route.  All of my nice graphics are
actually CGI scripts, doing extra things like checking the REFERER,
keeping track of image hits in an SQL database, etc. (we sell inlining 
of our images, so this data is useful).  It also makes it easier for 
me to add allowed hosts without restarting the server each time.

Chris
-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list