How to stop Fusker

[ponyman]

Ok guys, here's what I came up with (thanks cd34):
----------------------------------------------------------------------

RewriteEngine on
# leave this line in allow empty referrers, remove to disallow empty referrers
RewriteCond %{HTTP_REFERER} !^$ [NC]
RewriteCond %{HTTP_REFERER} !^http://(.*@)?([a-z0-9-]+\.)*oldmanporn\.com(:[0-9]+)?(/.*)?$ [NC]
RewriteCond %{HTTP_REFERER} !^http://(.*@)?1\.2\.3\.4(:[0-9]+)?(/.*)?$
RewriteRule ^.+\.(jpg|jpeg|gif)$ http://www.sexwitch.com/hotlink.jpg

AuthUserFile /dev/nul
AuthGroupFile /dev/nul
ErrorDocument 505 http://www.oldmenfucking.com/
ErrorDocument 404 http://www.oldmenfucking.com/

----------------------------------------------------------------
This replaces any hotlinked image with an image; hotlink.jpg

Here is a link to fusker with my domains and hotlinked images: http://fusker.lewww.com/index.php?query=oldmanporn.com

See for yourself how well it is working! Awesome.

One question I have, I left out this bit of code in my .htaccess

[NC,F,L]


is that important? Thanks for all your help! I've been getting hammered by fusker!

[Jel]

Feel free to take that pic down btw

[wankmaster]

I removed my example of how to defeat .htaccess

( it also hotlinked the oldmanporn btw ).

I'm happy that .htaccess seems to stop Fusker for you all. ;-)

[Jel]

Thanks wankmaster,
Interesting stuff for sure

[cd34]

The 1\.2\.3\.4 is supposed to be replaced with your IP address.

Any referrer protection is basically useless in a number of conditions, and there are ways around it. However, the above does seem to handle about 99% of the cases.

[juggernaut]

Im using the one above, if someone gets around it then well to be honest here. I just hate fighting shit like this but Ill deal with it when I see it. Strange thing when i go to test my HL it does say that it works, but im looking to see if my current image is working also, anyway to figure out that? The testing sites jus give you an x if its working.
http://www.camhostlist.com/images/nohotlink.jpg

[Brsicoe]

I don't use htaccess because it is a resource whore. You can use SetEnvIfNoCase instead. Plus you can get real fancy by using symbolic links and random strings for your content that get changed via a crontab every X number of minutes/hours.

Cheers |nursing

[ponyman]

Originally Posted by Jel

Feel free to take that pic down btw

I don't get it?

[wankmaster]

For all practical purposes the issue is solved by .htaccess

I don't think it's worth worrying about. Just set up your .htaccess similar to above recommendations if you're bothered about hotlinking.

Apache docs advise against .htaccess for performance reasons, tho threads on other boards say that with a well loaded modern server this isn't likely to be the bottleneck.

Unless you have REAL perfomance issues, I think .htaccess is fine.

[juggernaut]

Hum I wonder if this could be the reason for some slow page loads on my site. I just went over to a new host and have asked them to look at their server. First day I left the file they provided me with, then i went and placed this hotlink code. Cant say 100% for sure if it changed before or after, but it has been annoying the hell out of me.

[Exploy]

Originally Posted by wankmaster

I just emailed them and asked them to stop. They emailed back and said "OK".
Then they stopped.

Don't know if this simple method still works tho.

I can't find their e-mail. 8(

Let me know it please.

[wankmaster]

Hi,

This was last year I mailed them, and I don't remember if maybe it was just filling in a contact form on the website.

Sorry not to be more helpful than that.