Hotlinking Fuckhead even with htaccess

[Ramster]

This asshole http://www.notsuitableforwork.com/
is hotlinking galleries and images from the galleries.

I have htaccess yet he gets around it by posting the gallery link like this only loading the images.
http://www.notsuitableforwork.com/g...ashe/nude/image[01-20].jpg

I'll give it an hour before I fix my htaccess to redirect this asshole but take a look and tell me what do you guys think? A good way to get around normal an htaccess file huh?

[RawAlex]

I would contact his host (candid hosting) and point out that he is specifically attempting to circumvent htaccess to link to images that you are specifically denying to outside parties.

It is a borderline hack.

Further, with the new 2257 regulations, these sites are almost certainly illegal, in that they are publishing content without documentation. Hotlinking might finally be a crime worth pursuing.

Alex

[Ramster]

That was exactly what I was about to do. Thanks Alex

Also, the link did not work. Click the Danni Ashe pic 8 pics down and you'll what I mean.

[airdick]

Originally posted by Ramster
That was exactly what I was about to do. Thanks Alex

Also, the link did not work. Click the Danni Ashe pic 8 pics down and you'll what I mean.

What do your rewrite rules look like?

I tried to duplicate what (i think) the hotlinker is doing against my own domain and couldn't get it to work.

[Ramster]

A regular ReWrite rule won't work!!

Here's a sample gallery url:
domain.com/nude/gallery.html
He's linking to the url like this:
domains.com/nude/image[01-20].jpg

So the htaccess file thinks the referrer IS from you're own domain by him keeping everything there except replacing gallery.html with image[01-20].jpg
|pissed|

[airdick]

Originally posted by Ramster
A regular ReWrite rule won't work!!

Here's a sample gallery url:
domain.com/nude/gallery.html
He's linking to the url like this:
domains.com/nude/image[01-20].jpg

So the htaccess file thinks the referrer IS from you're own domain by him keeping everything there except replacing gallery.html with image[01-20].jpg
|pissed|

Yeah, that's what thought.

My rewrite rules look something like this:

RewriteCond %{HTTP_REFERER} !^http://(www\.)?domainname.com(/)?.*$ [NC]
RewriteRule .*\.(gif|jpg)$ http://www.domainname.com/hlink.html [R]


The ^ matches start of line, so if the referrering string doesn't begin with my domain name the rewrite rule kicks in.

Would this fix the problem, or is there something else that I'm missing?

[Useless]

Ramster, I just typed a direct link to one of those images into my browser and got the pic. Something is going on with your .htaccess.

[Ramster]

Originally posted by Useless Warrior
Ramster, I just typed a direct link to one of those images into my browser and got the pic. Something is going on with your .htaccess.

Really?

Hmmm, always worked before. Let me try some things then.

EDIT: I just tried it and got my 404 page.
Try going to these links:
http://www.baberankings.com/danniashe/nude/image03.jpg
http://www.baberankings.com/taylor/cutie/image04.jpg
http://www.baberankings.com/danni-ashe/image10.jpg

[Cleo]

Do not use wild cards in your htaccess.

ErrorDocument 404 http://www.cleos-porn-links.com/
ErrorDocument 403 http://www.cleos-porn-links.com/

DirectoryIndex index.html index.php index.shtml index.htm

RewriteEngine on
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com:80/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com:80/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com:80.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com:80.*$ [NC]

RewriteRule [Ss][Ww][Ff]$|[Jj][Pp][Ee]*[Gg]|[Gg][Ii][Ff]$ http://cleo-says-fuck-you.com/ [R,L]

Note this line
RewriteCond %{HTTP_REFERER} !^$
is optional. It allows someone to type the url in and see the image. It basically say that no referral is allowed. I use it it myself but could be considered a hole so to speak.

[Useless]

Yup, 404ing now. I still don't understand how that fuckers page is pulling the images. I mean, once you click Danni Ashe's thumb, the big gallery page is using direct links to the images. How can it get past the .htaccess?

[Ramster]

Beats me how it works exactly but it is.

My htaccess is like Cleo's. I think I actully got mine from Cleo's htaccess url she's had online for years. hehe

FYI: I called and since emailed Candid Hosting so it'll be interesting to see how they respond.

[Useless]

Cleo, I went to http://cleo-says-fuck-you.com/ and was expecting something really vicious there. Perhaps a popup hell that would make the the person never go back online. But, oh no. You are ever the consumate marketer making lemonade from hotlinking lemons.

[Cleo]

I could post something really nasty that will most likely cause you to have to pull the plug of your computer if you are running Windows IE if you like.

http://cleo-says-fuck-you.com/hell/
DO NOT CLICK ON THIS!!!

[Useless]

<title>POP! You're fucked!</title>
That pretty much says it all. And yes, if someone says, 'don't click' - I click! You gotta love Firefox.

[Cleo]

It is hard to believe that anyone would surf with a browser that didn't have popup blocker built in.

I didn't click it with my IE and had to force quit it after I had about 3 dozen windows going. lol

[Useless]

Ramster- ok here is the thing that I don't understand -
Your htaccess is blocking anyone from hitting the image directly, as in your links above, but they can be sourced into webpage. I copied the html for the hotlinking page to my desktop. It still shows the images when run here locally. So I put in the code for one of my images and it did not appear, but yours still do.

Where are the htaccess gurus when you need them.
This is mine if anyone knows why mine seems to work in this instance, but Ramster's doesn't, I'm all ears.

<Files 403.shtml>
order allow,deny
allow from all
</Files>


RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://youdapimp.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://youdapimp.com$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.youdapimp.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.youdapimp.com$ [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp)$ - [F,NC]

[RawAlex]

It would not be work at all in PHP to have a thing actually keep popping named windows until the system crashes. Maybe 5 lines of code?

I figure most systems couldn't handle more than about 30 or 40 before they croak.

Alex

[Cleo]

Yours doesn't have this line
RewriteCond %{HTTP_REFERER} !^$

It basically say that no referral is allowed.

[Useless]

Here is a nifty little tool:
http://altlab.com/hotlinkchecker.php

Go ahead, try it!

[Cleo]

I was sure to clear my cache first.

I got a broken image on this url
http://kinkycleo.com/avs/media/masthead.jpg

You will get the image if you click it from this board as I have greenguysboard.com in my htaccess file.

[airdick]

Originally posted by Ramster
Beats me how it works exactly but it is.

My htaccess is like Cleo's. I think I actully got mine from Cleo's htaccess url she's had online for years. hehe


Could you paste in the rules that you are using so that we can have a look?

[Ramster]

ErrorDocument 404 http://www.baberankings.com/404.html
ErrorDocument 403 http://www.baberankings.com/404.html
ErrorDocument 500 http://www.baberankings.com/404.html
AuthUserFile /dev/null
AuthGroupFile /dev/null

RewriteEngine on
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} !^http://.*baberankings.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*baberankings.com.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*www.baberankings.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*www.baberankings.com.*$ [NC]
RewriteRule .*[Jj][Pp][Ee]*[Gg]$|.*[Gg][Ii][Ff]$ http://www.baberankings.com/404.html [R,L]

[Cleo]

Ramster that isn't mine. I don't put wild cards in mine.

[Useless]

I just checked and it looks like you've plugged those holes, Ramster. Don't ya love it when a plan comes together.

[Alphawolf]

Originally posted by Ramster
Really?

Hmmm, always worked before. Let me try some things then.

EDIT: I just tried it and got my 404 page.
Try going to these links:
http://www.baberankings.com/danniashe/nude/image03.jpg
http://www.baberankings.com/taylor/cutie/image04.jpg
http://www.baberankings.com/danni-ashe/image10.jpg

That first image is loading for me right now. The other two 404.

Sad thing is that it's a nicely designed site and if he did things legit he'd probably do well. :(

[airdick]

Originally posted by Useless Warrior
I just checked and it looks like you've plugged those holes, Ramster. Don't ya love it when a plan comes together.

hmmmm... I can still hotlink with a URL like this:

http://www.dangpow.com/~ejl/TESTING-ONLY.html?12345http://www.baberankings.com


but this is blocked:

http://www.dangpow.com/~ejl/TESTING-ONLY.html

You need to drop those wildcards that come before the hostname to stop it.

[Useless]

Originally posted by Useless Warrior
I just checked and it looks like you've plugged those holes, Ramster. Don't ya love it when a plan comes together.

Doh! Spoke too soon. They're back...

[Alphawolf]

Originally posted by Cleo
It is hard to believe that anyone would surf with a browser that didn't have popup blocker built in.

I didn't click it with my IE and had to force quit it after I had about 3 dozen windows going. lol

I got a runtime error when trying your nasty link, but I had to click OK to whether I wanted to debug it.

I load task manager on startup and anything wanky goes on I just end IE.

I'm really glad I'm in FireFox now though.

PS- Ramster, I forgot to clewar my cache which is why the dannicash image loaded on my system. So, ignore my stupid reply. :D

[Cleo]

That nasty link was where I sent hotlinkers at one time, a long time ago. Back in the Windows98 days I was told it was a real killer. Times change.

[Ramster]

Originally posted by Useless Warrior
I just checked and it looks like you've plugged those holes, Ramster. Don't ya love it when a plan comes together.

Plugged? That's the same htaccess file that's been on that domain for a year or more.

[DangerDave]

Doesnt look plugged to me.. I still see baberankings pics on his site?

http://www.baberankings.com/danniashe/nude/image12.jpg

DD

[Alphawolf]

Originally posted by DangerDave
Doesnt look plugged to me.. I still see baberankings pics on his site?

http://www.baberankings.com/danniashe/nude/image12.jpg

DD

Did you clear your cache unlike I did a few posts up? ;)

It 404's for me.

[DangerDave]

True True... working now..

DD

[Ramster]

FUCK CANDID HOSTING.

They want me to mail them (yes snail mail) info against copywrite infringement. They do not seem to care that this guy is hotlinking every photo on that page from someone else's server.

Fuck him:
http://www.notsuitableforwork.com/gallerize.php?url=http://www.baberankings.com/danniashe/nude/image[01-20].jpg

[Alphawolf]

What? The owner has posted here before.

That's plain fucked up. Candid Hosting is just fine with their client's stealing other people's bandwidth and HD resources.

Snail mail them? What the fuck for?

Candid Hosting |raygun|

[Ramster]

Their response is based on copyright. They do not care what this guy is doing.

THEY OUTLINED THE LAW THEN CLOSED WITH THIS:

If you wish to send another letter in the prescribed format and
containing the information
required under the DMCA, we will address the matter at that time.

[digifan]

I hate hotlinkers..
|raygun|

Ramster, you have a PM.

[DangerDave]

Lets see if we can get them here faster...

Candid Hosting

candid hosting

candidhosting

CandidHosting

http://www.candidhosting.com/

:D


I am hanging out for the explanation of this one...!

DD

[Alphawolf]

Even better:

"I need a new web host"

"best web hosting"

"best webhost"

"best host"

Sick 'em boardtracker! Goooood boy. :D

[RawAlex]

host down host is down I need a new host is candid hosting good candidhost is it good?

Would somoene from candid hosting like to come handle this hot potato issue?

Alex

PS: My host is up. It's national-net. They rock.

[Alphawolf]

Originally posted by RawAlex PS: My host is up. It's national-net. They rock.

They may rock, but they never replied to my virtual account requests. |pissed|

Guess they only want dedicated accounts, which is fine.

[Cleo]

It doesn't work with my htaccess.

Gallery used for testing
http://kinky-cleo.com/porn/niche/nuns/galleries/gallery.html

Be sure to clear your cache first.
Test string used
http://kinky-cleo.com/porn/niche/nuns/images/[01-30].jpg

[SirMoby]

Wow!

I can see when there's some question and it's not obvious that the content is stolen but when the links are there or domains are on the images it's pretty cut and dry.

Candid hosting purchases advertising on a number of webmaster boards. Posting the responce to a few would probably get you a fast resolution. If it doesn't then maybe a few webmasters looking for nerw hosting would appreciate your comments :)

[venturi]

Originally posted by Ramster
RewriteCond %{HTTP_REFERER} !^http://.*baberankings.com/.*$ [NC]

Hey Ramster,
The reason, as far as I can tell, that the wanker was getting around your htaccess is because of the * infront of your domain name. Basically the way your RewriteCond is being interpreted is that ANY referer that begins with "http://" and contains "baberankings.com" is accepted.
It should be like this:

RewriteCond %{HTTP_REFERER} !^http://www.baberankings.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://baberankings.com/.*$ [NC]


p.s. - that was a pretty shitty response you got from Candid.

[Ramster]

Originally posted by venturi
Hey Ramster,
The reason, as far as I can tell, that the wanker was getting around your htaccess is because of the * infront of your domain name. Basically the way your RewriteCond is being interpreted is that ANY referer that begins with "http://" and contains "baberankings.com" is accepted.
It should be like this:

RewriteCond %{HTTP_REFERER} !^http://www.baberankings.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://baberankings.com/.*$ [NC]


p.s. - that was a pretty shitty response you got from Candid.

Well look at that you are right! Thanks Venturi. :)

Too bad too as I liked the image I was popping up to his surfers. I think I'll keep that there for a few more hours.

[Ramster]

Ooops, that's a bad code. Without the * NO images load at all and even from my own pages clicking the big images redirects to the htaccess specified 404 page.

[Useless]

Originally posted by Ramster
Plugged? That's the same htaccess file that's been on that domain for a year or more.

Jeezy Chreezy! Didn't anybody read where I retracted my statement?

Honestly, when I checked it locally(from my desktop), the images were missing. Then I went to the shithead's site and the images loaded. Checked again locally and the images loaded again.

[Ramster]

I know Useless Warrior. ;)
I just didn't want people thinking I'm stupid enough being in biz this long to not have an htaccess file on my server and domains. LOL

[airdick]

Originally posted by Ramster
Ooops, that's a bad code. Without the * NO images load at all and even from my own pages clicking the big images redirects to the htaccess specified 404 page.

Double check for typos in your rules, or paste the rules again and we'll double check it for you. :)

[Cleo]

Ramster without the wild card in front of your domain you have to list every possibility.

Like the way that I do it.
http://cleogoodstuff.com/htaccess.txt

[Ramster]

Venturi, that does work I needed more options in there is all.

airdick, see above.

Cleo
Thanks, as I said to Venturi above you were right I needed more options in there. All images seem to be loading fine without the wildcard.

For the record, Candid Hosting are still idiots in my books. |angry|

[MMemmer]

|waves| Hello Ramster,

What address did your send your email to? Have you spoken to anyone in our tech support department yet?

I will not be in at the office for a few hours yet but in the meantime you can call in at 877-248-9888 (toll free) or 813-221-4429 and dial ext 707 or 2. If you prefer email, please send it to Support@CandidHosting.com .

I hope that this helps and good luck,

Mark

[Ramster]

Hi Mark,

Thanks for the response. My ticket number with you guys is 107056 so you can see there I'm sure.

I called and was told to email. I had to call back 4-5 hours later and finally got an email response that basically quoted DMCA copyright laws saying I had to MAIL in crap from Danni Ashe (who owns the original rights to the images) and from me stating he has no right to post those images.

NEWFLASH: HE IS HOTLINKING EVERYTHING FROM MY SERVER & MOST OTHER PEOPLES USING OUR BANDWIDTH FROM MY HOSTING COMPANY COSTING ME MONEY

Quote from 1 email response from you guys:
"We host many companies that link to images on other servers
that may be hosted at other locations. These servers may be theirs,
partners, or some type of joint ventures."

HUH? Do a whois after I complained to see that he is linking to MY server. We are not in a joint venture.

[backoffbitch]

hmm. I know of this guy. He's got a bunch of underage topsites too. Really classy fella (sarcasm)

[Useless]

Most hosts, receiving a report of a hotlinker, would have IMMEDIATELY checked out the suspect website and shut it down upon verfication of such activity. (Which would take all of 60 seconds) I simply don't understand why they have chosen to conduct themselves in this manner. I guess some hosts understand and respect the laws and rules governing such things, while others do not.

[MMemmer]

Hello Ramster,

It is incorrect to say that we support Hotlinkers, however we are bound by the laws that govern our industry.

Here we have the case of a small virtual account doing something that is potentially damaging to the communities perception of our business but we are still legally bound to act in a prescribed manner for situations just like this. We had requested that the individual cease and desist at both yours and our request.

By no means do I hold myself up as an expert on this but I am confident that our Network Administrator who responded to you is quite competent in his understanding of both the law and what he can and cannot do about the situation. I do note that we disabled the virtual account at 11:42 am EST, I certainly do hope that this resolved the issue to your satisfaction (and yes I wish it could have been done faster but there are protocols that must be followed).

Thanks for your patience,

[Useless]

BTW, candid could use some htaccess too, just in case someone becomes enamored by this dork: http://www.candidhosting.com/images/pic_homepage7.jpg
Obviously you must understand how this frustrates this community. Why not add anti-hotlinking measures to your TOS, as it is clearly a major concern.

[drobertson]

Yes, let's all clamour to download the image from our site that is widely available on several, several other 'tech' websites. Infact, you can purchase a cd with thousands of similar images.

Do you honestly think anyone would bother to hotlink such an image? Or better yet, ANY image our site?

Ramster: I turned that customer off a few hours ago, and told him why. His account is still off, and will be dealt with by 'abuse@' in the morning. As far as I'm concerned, he'll remain off until the material is removed. Accept our apologies, but you have to understand - we have to take these complaints with what we're given. We're not going to turn off a customer just because someone says 'that's my content'. We need to look at all the facts, etc.

Either way, again, his account is disabled - entirely.

[Ramster]

Originally posted by MMemmer
Hello Ramster,

It is incorrect to say that we support Hotlinkers, however we are bound by the laws that govern our industry.

Here we have the case of a small virtual account doing something that is potentially damaging to the communities perception of our business but we are still legally bound to act in a prescribed manner for situations just like this. We had requested that the individual cease and desist at both yours and our request.

By no means do I hold myself up as an expert on this but I am confident that our Network Administrator who responded to you is quite competent in his understanding of both the law and what he can and cannot do about the situation. I do note that we disabled the virtual account at 11:42 am EST, I certainly do hope that this resolved the issue to your satisfaction (and yes I wish it could have been done faster but there are protocols that must be followed).

Thanks for your patience,

All I ever wanted was one of 2 things:
1-Give him time (for example 24 hours) to stop doing what he was doing
or
2-Shut him down for doing what he is doing.

You as a host can do just about anything you want to, let's face it you guys do it all the time! If a client is doing something that is illegal/immoral and you gave him a warning to stop and a reasonable time frame to do so then shut him down I don't think you'd have any issues.

But then again I'm not a lawyer. Though it might be good for me to contact one and see what my options are for all the time and bullshit I have to go through with this.

But who am I kidding I've already wasted enough time with this and I patched my htaccess file to stop the linking.

But every webmaster in the adult community knows that what this guy is doing is not right and many hosts would AT LEAST ask him to stop.

And it doesn't look disabled to me.
http://www.notsuitableforwork.com/

[Ramster]

drobertson
All I ever expected was a response from you guys saying we see what is going on and we've asked him to stop. If he does not then we'll take steps to disable his account.

I thought there might be an outside chance you'd pull the plug right away but didn't really expect that.

I really don't expect any host to pull someone's account without a warning or request to stop doing what they are doing.

[Ramster]

He's down now.

Thank you Candid Hosting!

Now the other webmasters he was linking to will save money on their hosting bill.

[MMemmer]

Originally posted by Ramster
And it doesn't look disabled to me.
http://www.notsuitableforwork.com/

|jester| That slimy lil bastard is tricksy he is, I just sent the admin with his lil ole ray gun |raygun| and I think right may finally have prevailed|bananna| .

Ramster lets after all of this be friends, I do expect to be around in Miami next week, so perhaps you would let me buy you a drink from Candid Hosting ! |shake|

[Alphawolf]

It's disabled, Ramster.

"Forbidden
You don't have permission to access / on this server.

Apache/1.3.26 Server at www.notsuitableforwork.com Port 80"

You may just have the fucktwat's site in cache.

They have laws to follow 'cos you know - a 13yr old kid living in the Netherlends who can't afford pics may lawyer up if they just cut him off straight away. |jester|

[Ramster]

Originally posted by MMemmer
|jester| That slimy lil bastard is tricksy he is, I just sent the admin with his lil ole ray gun |raygun| and I think right may finally have prevailed|bananna| .

Ramster lets after all of this be friends, I do expect to be around in Miami next week, so perhaps you would let me buy you a drink from Candid Hosting ! |shake|

I don't take too much personal but I gotta tell ya I was pretty pissed. But I'm sure he'll be hosted somewhere else doing the same thing next week.

Yes I'll be in Miami and I like beer. ;)

[Useless]

Originally posted by drobertson
Do you honestly think anyone would bother to hotlink such an image? Or better yet, ANY image our site?


I would...|greenguy|

[eskimoen]

A little (usefull) spam :)

I have created a htaccess file generator on
http://www.htaccesstools.com/hotlink_protection/

Hope you can use it :)

[Cleo]

Some nice htaccess tools on that page. The password generator is very handy.

But on the anti-hotlinker generator it looks like it puts a wildcard in front of the domain name which is how this person was beating Ramster's htaccess.

[eskimoen]

Thanks :)

Acutally no wildcards are used in front of the domain.

RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?yourdomain.com.*$ [NC]

The wildcard dot is escaped, so it only matches www.yourdomain.com and yourdomain.com

[Cleo]

I thought that the ? in it acted as a wildcard, but I could be wrong.

[eskimoen]

http://httpd.apache.org/docs/mod/mod_rewrite.html#RewriteRule


Quantifiers:
? 0 or 1 of the preceding text


That means the ? applies to the "s" and "www."

[Cleo]

This is why I do marketing and not programing, I still don't fully understand. lol

Welcome to the board BTW :)

[DangerDave]

A very wise man named Ray... gave me this line long ago, when spoofing first became a problem...

RewriteCond %{HTTP_REFERER} ^http://([a-z0-9-]+\.)*scumsucker.com(:80)* [NC,OR]
It works..

DD

[eskimoen]

Originally posted by Cleo
This is why I do marketing and not programing, I still don't fully understand. lol

Welcome to the board BTW :)

Thank you Cleo.

May you all have a nice Sunday! :)