Question about .htacces

[Thomas Wehner]

Hello,

i have a little problem with an .htacces file.

The conten ist the following:
--------------------------------------

RewriteEngine on

RewriteCond %{HTTP_REFERER} !^$

RewriteCond %{HTTP_REFERER} !^http://(www\.)?deineHomepage\.de(/.*)?$ [NC]

RewriteRule \.(rar|zip)$ http://www.deineHomepage.de/images/geklaut.gif
[R,L]

------------------------------------

This Script helps protect links / files on webspace. If maybe www.xyz.de
links to an *.rar or *.zip file on my Webspace the user who wanted to
download this file is getting a message that he is not allowed to download,
because he didn't click a link to this file on my webpage.....

Now there is a little problem. If the User makes right click and is coping
the link and paste it into a new Browser Tab, the he is able to Downlaod my
file.

I think, it's because there is no HTTP_REFERER in an new Browser Window. Is
there any wayto change this, maybe if there is no Referer download is't
possible to.


THX
Thomas

PS: Please appologize my bad english

 

[brucie]

In alt.html Thomas Wehner said:

[clasic hotlinking mod_rewrite]
Now there is a little problem. If the User makes right click and is coping
the link and paste it into a new Browser Tab, the he is able to Downlaod my
file.

if you're worried about that then i had better not tell you the other
ways the rewrite doesn't work that are worse.

I think, it's because there is no HTTP_REFERER in an new Browser Window.

many people don't even send a referer or its something interesting
totally unrelated to being a referer.

Is there any wayto change this, maybe if there is no Referer download
is't possible to.

remove this line:

RewriteCond %{HTTP_REFERER} !^$

 

[Toby Inkster]

Is there any wayto change this, maybe if there is no Referer download is't
possible to.

Yes, but it's a dumb idea because it will block many legitimate accesses.
(e.g. user goes to your page, clicks on the link and his browser passes
the address to his download manager, which doesn't send a referer header.)