wilderness
msg:4539658 | 4:44 pm on Jan 27, 2013 (gmt 0) |
Mobile devices are changing the world.
Serving your images from a script is the only solution, and restricting the requests from your own active web pages.
|
georgi58
msg:4539660 | 5:21 pm on Jan 27, 2013 (gmt 0) |
would you, please give more details.
|
matrix_jan
msg:4539661 | 5:54 pm on Jan 27, 2013 (gmt 0) |
| This is not hotlinking, it is direct server request. |
|
You mean no referer? Try creating a white list in htaccess instead of a black one.
List all domains that are allowed to request images, if there is no referer then block access or show some image of your preference.
|
wilderness
msg:4539665 | 6:27 pm on Jan 27, 2013 (gmt 0) |
| if there is no referer then block access or show some image of your preference. |
|
This is NOT a sound practice.
There are too many blank referrals these days, and you would be denying many innocents.
|
wilderness
msg:4539668 | 7:15 pm on Jan 27, 2013 (gmt 0) |
| would you, please give more details. |
|
There are multiple previous explanations either in this forums archives or the SSID forum archives.
I've never saved the explanation (or link to same) because it's not feasible for my use.
Perhaps another may provide the details and/or a link.
|
lucy24
msg:4539694 | 1:42 am on Jan 28, 2013 (gmt 0) |
Robots don't send referers. That includes legitimate search engines. Obviously this is not a problem-- it may even be an advantage-- if you don't want your images crawled. But as wilderness said above, there are also perfectly legitimate humans who don't send referers. And you can't identify them with some constant variable oops, uhm, well, you know what I mean like UA or IP.
The core problem is that your server can't tell the difference between a hotlink and a direct request. The referer is identical either way: It's the name of the requesting page.
|
georgi58
msg:4539729 | 4:25 am on Jan 28, 2013 (gmt 0) |
| The core problem is that your server can't tell the difference between a hotlink and a direct request. The referer is identical either way: It's the name of the requesting page. |
|
if this is true, then logically you can write rules to exclude all other websites when requesting jpg files and serve particular page instead. not by IP or UA, but domain name.
|
|
