Hotlinking Fuckhead even with htaccess

[Ramster]

This asshole http://www.notsuitableforwork.com/
is hotlinking galleries and images from the galleries.

I have htaccess yet he gets around it by posting the gallery link like this only loading the images.
http://www.notsuitableforwork.com/g...ashe/nude/image[01-20].jpg

I'll give it an hour before I fix my htaccess to redirect this asshole but take a look and tell me what do you guys think? A good way to get around normal an htaccess file huh?

[RawAlex]

I would contact his host (candid hosting) and point out that he is specifically attempting to circumvent htaccess to link to images that you are specifically denying to outside parties.

It is a borderline hack.

Further, with the new 2257 regulations, these sites are almost certainly illegal, in that they are publishing content without documentation. Hotlinking might finally be a crime worth pursuing.

Alex

[Ramster]

That was exactly what I was about to do. Thanks Alex

Also, the link did not work. Click the Danni Ashe pic 8 pics down and you'll what I mean.

[airdick]

Originally posted by Ramster
That was exactly what I was about to do. Thanks Alex

Also, the link did not work. Click the Danni Ashe pic 8 pics down and you'll what I mean.

What do your rewrite rules look like?

I tried to duplicate what (i think) the hotlinker is doing against my own domain and couldn't get it to work.

[Ramster]

A regular ReWrite rule won't work!!

Here's a sample gallery url:
domain.com/nude/gallery.html
He's linking to the url like this:
domains.com/nude/image[01-20].jpg

So the htaccess file thinks the referrer IS from you're own domain by him keeping everything there except replacing gallery.html with image[01-20].jpg
|pissed|

[airdick]

Originally posted by Ramster
A regular ReWrite rule won't work!!

Here's a sample gallery url:
domain.com/nude/gallery.html
He's linking to the url like this:
domains.com/nude/image[01-20].jpg

So the htaccess file thinks the referrer IS from you're own domain by him keeping everything there except replacing gallery.html with image[01-20].jpg
|pissed|

Yeah, that's what thought.

My rewrite rules look something like this:

RewriteCond %{HTTP_REFERER} !^http://(www\.)?domainname.com(/)?.*$ [NC]
RewriteRule .*\.(gif|jpg)$ http://www.domainname.com/hlink.html [R]


The ^ matches start of line, so if the referrering string doesn't begin with my domain name the rewrite rule kicks in.

Would this fix the problem, or is there something else that I'm missing?

[Useless]

Ramster, I just typed a direct link to one of those images into my browser and got the pic. Something is going on with your .htaccess.

[Ramster]

Originally posted by Useless Warrior
Ramster, I just typed a direct link to one of those images into my browser and got the pic. Something is going on with your .htaccess.

Really?

Hmmm, always worked before. Let me try some things then.

EDIT: I just tried it and got my 404 page.
Try going to these links:
http://www.baberankings.com/danniashe/nude/image03.jpg
http://www.baberankings.com/taylor/cutie/image04.jpg
http://www.baberankings.com/danni-ashe/image10.jpg

[Cleo]

Do not use wild cards in your htaccess.

ErrorDocument 404 http://www.cleos-porn-links.com/
ErrorDocument 403 http://www.cleos-porn-links.com/

DirectoryIndex index.html index.php index.shtml index.htm

RewriteEngine on
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com:80/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com:80/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com:80.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com:80.*$ [NC]

RewriteRule [Ss][Ww][Ff]$|[Jj][Pp][Ee]*[Gg]|[Gg][Ii][Ff]$ http://cleo-says-fuck-you.com/ [R,L]

Note this line
RewriteCond %{HTTP_REFERER} !^$
is optional. It allows someone to type the url in and see the image. It basically say that no referral is allowed. I use it it myself but could be considered a hole so to speak.

[Useless]

Yup, 404ing now. I still don't understand how that fuckers page is pulling the images. I mean, once you click Danni Ashe's thumb, the big gallery page is using direct links to the images. How can it get past the .htaccess?

[Ramster]

Beats me how it works exactly but it is.

My htaccess is like Cleo's. I think I actully got mine from Cleo's htaccess url she's had online for years. hehe

FYI: I called and since emailed Candid Hosting so it'll be interesting to see how they respond.

[Useless]

Cleo, I went to http://cleo-says-fuck-you.com/ and was expecting something really vicious there. Perhaps a popup hell that would make the the person never go back online. But, oh no. You are ever the consumate marketer making lemonade from hotlinking lemons.

[Cleo]

I could post something really nasty that will most likely cause you to have to pull the plug of your computer if you are running Windows IE if you like.

http://cleo-says-fuck-you.com/hell/
DO NOT CLICK ON THIS!!!

[Useless]

<title>POP! You're fucked!</title>
That pretty much says it all. And yes, if someone says, 'don't click' - I click! You gotta love Firefox.

[Cleo]

It is hard to believe that anyone would surf with a browser that didn't have popup blocker built in.

I didn't click it with my IE and had to force quit it after I had about 3 dozen windows going. lol

[Useless]

Ramster- ok here is the thing that I don't understand -
Your htaccess is blocking anyone from hitting the image directly, as in your links above, but they can be sourced into webpage. I copied the html for the hotlinking page to my desktop. It still shows the images when run here locally. So I put in the code for one of my images and it did not appear, but yours still do.

Where are the htaccess gurus when you need them.
This is mine if anyone knows why mine seems to work in this instance, but Ramster's doesn't, I'm all ears.

<Files 403.shtml>
order allow,deny
allow from all
</Files>


RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://youdapimp.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://youdapimp.com$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.youdapimp.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.youdapimp.com$ [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp)$ - [F,NC]

[RawAlex]

It would not be work at all in PHP to have a thing actually keep popping named windows until the system crashes. Maybe 5 lines of code?

I figure most systems couldn't handle more than about 30 or 40 before they croak.

Alex

[Cleo]

Yours doesn't have this line
RewriteCond %{HTTP_REFERER} !^$

It basically say that no referral is allowed.

[Useless]

Here is a nifty little tool:
http://altlab.com/hotlinkchecker.php

Go ahead, try it!

[Cleo]

I was sure to clear my cache first.

I got a broken image on this url
http://kinkycleo.com/avs/media/masthead.jpg

You will get the image if you click it from this board as I have greenguysboard.com in my htaccess file.

[airdick]

Originally posted by Ramster
Beats me how it works exactly but it is.

My htaccess is like Cleo's. I think I actully got mine from Cleo's htaccess url she's had online for years. hehe

Could you paste in the rules that you are using so that we can have a look?

[Ramster]

ErrorDocument 404 http://www.baberankings.com/404.html
ErrorDocument 403 http://www.baberankings.com/404.html
ErrorDocument 500 http://www.baberankings.com/404.html
AuthUserFile /dev/null
AuthGroupFile /dev/null

RewriteEngine on
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} !^http://.*baberankings.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*baberankings.com.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*www.baberankings.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*www.baberankings.com.*$ [NC]
RewriteRule .*[Jj][Pp][Ee]*[Gg]$|.*[Gg][Ii][Ff]$ http://www.baberankings.com/404.html [R,L]

[Cleo]

Ramster that isn't mine. I don't put wild cards in mine.

[Useless]

I just checked and it looks like you've plugged those holes, Ramster. Don't ya love it when a plan comes together.

[Alphawolf]

Originally posted by Ramster
Really?

Hmmm, always worked before. Let me try some things then.

EDIT: I just tried it and got my 404 page.
Try going to these links:
http://www.baberankings.com/danniashe/nude/image03.jpg
http://www.baberankings.com/taylor/cutie/image04.jpg
http://www.baberankings.com/danni-ashe/image10.jpg

That first image is loading for me right now. The other two 404.

Sad thing is that it's a nicely designed site and if he did things legit he'd probably do well.