Re: Referer checking is able to be referer spoofed

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 20 Mar 2005 09:38:29 +1100, dan rossi <daniel@xxxxxxxxxxxxxxxx> wrote:
> >
> > Hmm its the exact setup with how the video filenames are generated in
> > the player to prevent hotlinking. I guess I am on my own, my client
> > has very paranoid customers as they have to pay for the bandwidth.
> > Lets see how I go. But theoretically we must assume these people dont
> > have php.
> 
> It looks like we may go with a tokenizer url system, but it means the
> customers will need php oh well.
> 

On the referring site have an image that is hosted on YOUR domain. Set
a cookie when the user's browser requests the image. Even a 1x1 gif in the
corner will do: you just need it to come from your domain. Then
validate against that cookie.

Dotan Cohen

http://Liriks-Song.com/
http://Song-Lirics.com/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux