Hotlinking Fuckhead even with htaccess
 

This asshole http://www.notsuitableforwork.com/
is hotlinking galleries and images from the galleries.

I have htaccess yet he gets around it by posting the gallery link like this only loading the images.
http://www.notsuitableforwork.com/g...ashe/nude/image[01-20].jpg

I'll give it an hour before I fix my htaccess to redirect this asshole but take a look and tell me what do you guys think? A good way to get around normal an htaccess file huh?

I would contact his host (candid hosting) and point out that he is specifically attempting to circumvent htaccess to link to images that you are specifically denying to outside parties.

It is a borderline hack.

Further, with the new 2257 regulations, these sites are almost certainly illegal, in that they are publishing content without documentation. Hotlinking might finally be a crime worth pursuing.

Alex

That was exactly what I was about to do. Thanks Alex

Also, the link did not work. Click the Danni Ashe pic 8 pics down and you'll what I mean.

What do your rewrite rules look like?

I tried to duplicate what (i think) the hotlinker is doing against my own domain and couldn't get it to work.

A regular ReWrite rule won't work!!

Here's a sample gallery url:
domain.com/nude/gallery.html
He's linking to the url like this:
domains.com/nude/image[01-20].jpg

So the htaccess file thinks the referrer IS from you're own domain by him keeping everything there except replacing gallery.html with image[01-20].jpg
|pissed|

Yeah, that's what thought.

My rewrite rules look something like this:

RewriteCond %{HTTP_REFERER} !^http://(www\.)?domainname.com(/)?.*$ [NC]
RewriteRule .*\.(gif|jpg)$ http://www.domainname.com/hlink.html [R]


The ^ matches start of line, so if the referrering string doesn't begin with my domain name the rewrite rule kicks in.

Would this fix the problem, or is there something else that I'm missing?

Ramster, I just typed a direct link to one of those images into my browser and got the pic. Something is going on with your .htaccess.

Really?

Hmmm, always worked before. Let me try some things then.

EDIT: I just tried it and got my 404 page.
Try going to these links:
http://www.baberankings.com/danniashe/nude/image03.jpg
http://www.baberankings.com/taylor/cutie/image04.jpg
http://www.baberankings.com/danni-ashe/image10.jpg

Do not use wild cards in your htaccess.

ErrorDocument 404 http://www.cleos-porn-links.com/
ErrorDocument 403 http://www.cleos-porn-links.com/

DirectoryIndex index.html index.php index.shtml index.htm

RewriteEngine on
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com:80/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com:80/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://kinkycleo.com:80.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.kinkycleo.com:80.*$ [NC]

RewriteRule [Ss][Ww][Ff]$|[Jj][Pp][Ee]*[Gg]|[Gg][Ii][Ff]$ http://cleo-says-fuck-you.com/ [R,L]

Note this line
RewriteCond %{HTTP_REFERER} !^$
is optional. It allows someone to type the url in and see the image. It basically say that no referral is allowed. I use it it myself but could be considered a hole so to speak.

Yup, 404ing now. I still don't understand how that fuckers page is pulling the images. I mean, once you click Danni Ashe's thumb, the big gallery page is using direct links to the images. How can it get past the .htaccess?

Beats me how it works exactly but it is.

My htaccess is like Cleo's. I think I actully got mine from Cleo's htaccess url she's had online for years. hehe

FYI: I called and since emailed Candid Hosting so it'll be interesting to see how they respond.

Cleo, I went to http://cleo-says-fuck-you.com/ and was expecting something really vicious there. Perhaps a popup hell that would make the the person never go back online. But, oh no. You are ever the consumate marketer making lemonade from hotlinking lemons.

I could post something really nasty that will most likely cause you to have to pull the plug of your computer if you are running Windows IE if you like.

http://cleo-says-fuck-you.com/hell/
DO NOT CLICK ON THIS!!!

That pretty much says it all. And yes, if someone says, 'don't click' - I click! You gotta love Firefox.

It is hard to believe that anyone would surf with a browser that didn't have popup blocker built in.

I didn't click it with my IE and had to force quit it after I had about 3 dozen windows going. lol

Ramster- ok here is the thing that I don't understand -
Your htaccess is blocking anyone from hitting the image directly, as in your links above, but they can be sourced into webpage. I copied the html for the hotlinking page to my desktop. It still shows the images when run here locally. So I put in the code for one of my images and it did not appear, but yours still do.

Where are the htaccess gurus when you need them.
This is mine if anyone knows why mine seems to work in this instance, but Ramster's doesn't, I'm all ears.


order allow,deny
allow from all



RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://youdapimp.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://youdapimp.com$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.youdapimp.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.youdapimp.com$ [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp)$ - [F,NC]

It would not be work at all in PHP to have a thing actually keep popping named windows until the system crashes. Maybe 5 lines of code?

I figure most systems couldn't handle more than about 30 or 40 before they croak.

Alex

Yours doesn't have this line
RewriteCond %{HTTP_REFERER} !^$

It basically say that no referral is allowed.

Here is a nifty little tool:
http://altlab.com/hotlinkchecker.php

Go ahead, try it!

I was sure to clear my cache first.

I got a broken image on this url
http://kinkycleo.com/avs/media/masthead.jpg

You will get the image if you click it from this board as I have greenguysboard.com in my htaccess file.

Could you paste in the rules that you are using so that we can have a look?

ErrorDocument 404 http://www.baberankings.com/404.html
ErrorDocument 403 http://www.baberankings.com/404.html
ErrorDocument 500 http://www.baberankings.com/404.html
AuthUserFile /dev/null
AuthGroupFile /dev/null

RewriteEngine on
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} !^http://.*baberankings.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*baberankings.com.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*www.baberankings.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://.*www.baberankings.com.*$ [NC]
RewriteRule .*[Jj][Pp][Ee]*[Gg]$|.*[Gg][Ii][Ff]$ http://www.baberankings.com/404.html [R,L]

Ramster that isn't mine. I don't put wild cards in mine.

I just checked and it looks like you've plugged those holes, Ramster. Don't ya love it when a plan comes together.

That first image is loading for me right now. The other two 404.

Sad thing is that it's a nicely designed site and if he did things legit he'd probably do well. :(

hmmmm... I can still hotlink with a URL like this:

http://www.dangpow.com/~ejl/TESTING-...berankings.com


but this is blocked:

http://www.dangpow.com/~ejl/TESTING-ONLY.html

You need to drop those wildcards that come before the hostname to stop it.

Doh! Spoke too soon. They're back...

I got a runtime error when trying your nasty link, but I had to click OK to whether I wanted to debug it.

I load task manager on startup and anything wanky goes on I just end IE.

I'm really glad I'm in FireFox now though.

PS- Ramster, I forgot to clewar my cache which is why the dannicash image loaded on my system. So, ignore my stupid reply. :D

That nasty link was where I sent hotlinkers at one time, a long time ago. Back in the Windows98 days I was told it was a real killer. Times change.

Plugged? That's the same htaccess file that's been on that domain for a year or more.

Doesnt look plugged to me.. I still see baberankings pics on his site?

http://www.baberankings.com/danniashe/nude/image12.jpg

DD

Did you clear your cache unlike I did a few posts up? ;)

It 404's for me.

True True... working now..

DD

FUCK CANDID HOSTING.

They want me to mail them (yes snail mail) info against copywrite infringement. They do not seem to care that this guy is hotlinking every photo on that page from someone else's server.

Fuck him:
http://www.notsuitableforwork.com/ga...#91;01-20].jpg

What? The owner has posted here before.

That's plain fucked up. Candid Hosting is just fine with their client's stealing other people's bandwidth and HD resources.

Snail mail them? What the fuck for?

Candid Hosting |raygun|

Their response is based on copyright. They do not care what this guy is doing.

THEY OUTLINED THE LAW THEN CLOSED WITH THIS:

If you wish to send another letter in the prescribed format and
containing the information
required under the DMCA, we will address the matter at that time.

I hate hotlinkers..
|raygun|

Ramster, you have a PM.

Lets see if we can get them here faster...

Candid Hosting

candid hosting

candidhosting

CandidHosting

http://www.candidhosting.com/

:D


I am hanging out for the explanation of this one...!

DD

Even better:

"I need a new web host"

"best web hosting"

"best webhost"

"best host"

Sick 'em boardtracker! Goooood boy. :D

host down host is down I need a new host is candid hosting good candidhost is it good?

Would somoene from candid hosting like to come handle this hot potato issue?

Alex

PS: My host is up. It's national-net. They rock.