Re: [PHP] Referer checking is able to be referer spoofed

2005-03-26 Thread Marek Kilimajer
Dan Rossi wrote: On 20/03/2005, at 5:40 AM, Marek Kilimajer wrote: If you need only hotlink protection then the current referer checking is just enough. Most users will not install referer spoofing software. But if you need to be 100% sure the videos are streamed through affiliate server, you ca

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-25 Thread Dan Rossi
On 20/03/2005, at 5:40 AM, Marek Kilimajer wrote: If you need only hotlink protection then the current referer checking is just enough. Most users will not install referer spoofing software. But if you need to be 100% sure the videos are streamed through affiliate server, you can use tokens - a

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread dan rossi
On 20/03/2005, at 10:14 AM, Marek Kilimajer wrote: The image can be hotlinked too ;) Bit of a headfuck ey ? Hmm I think we are gonna go with a mixture of that and a token url. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Marek Kilimajer
dan rossi wrote: Hmm its the exact setup with how the video filenames are generated in the player to prevent hotlinking. I guess I am on my own, my client has very paranoid customers as they have to pay for the bandwidth. Lets see how I go. But theoretically we must assume these people dont ha

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Marek Kilimajer
Dotan Cohen wrote: On Sun, 20 Mar 2005 09:38:29 +1100, dan rossi <[EMAIL PROTECTED]> wrote: Hmm its the exact setup with how the video filenames are generated in the player to prevent hotlinking. I guess I am on my own, my client has very paranoid customers as they have to pay for the bandwidth. Le

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Dotan Cohen
On Sun, 20 Mar 2005 09:38:29 +1100, dan rossi <[EMAIL PROTECTED]> wrote: > > > > Hmm its the exact setup with how the video filenames are generated in > > the player to prevent hotlinking. I guess I am on my own, my client > > has very paranoid customers as they have to pay for the bandwidth. > > L

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread dan rossi
Hmm its the exact setup with how the video filenames are generated in the player to prevent hotlinking. I guess I am on my own, my client has very paranoid customers as they have to pay for the bandwidth. Lets see how I go. But theoretically we must assume these people dont have php. It look

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Dan Rossi
On 20/03/2005, at 5:40 AM, Marek Kilimajer wrote: If you need only hotlink protection then the current referer checking is just enough. Most users will not install referer spoofing software. But if you need to be 100% sure the videos are streamed through affiliate server, you can use tokens - a

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Marek Kilimajer
Dan Rossi wrote: On 19/03/2005, at 2:36 AM, Marek Kilimajer wrote: Dan Rossi wrote: On 19/03/2005, at 2:06 AM, [EMAIL PROTECTED] wrote: I think you misunderstood me or I wasnt clear, the links are coming from a syndicate site to the main site, so we check on that domain. I am looking at other op

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Dan Rossi
On 19/03/2005, at 2:36 AM, Marek Kilimajer wrote: Dan Rossi wrote: On 19/03/2005, at 2:06 AM, [EMAIL PROTECTED] wrote: I think you misunderstood me or I wasnt clear, the links are coming from a syndicate site to the main site, so we check on that domain. I am looking at other options, maybe som

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-18 Thread Marek Kilimajer
Dan Rossi wrote: On 19/03/2005, at 2:06 AM, [EMAIL PROTECTED] wrote: the other side of this is blocking legit users. if you base your access (at least in part) on the referrer (aka referer), you will block anyone who has turned them off in their browser or who is behind a firewall that doesn't pass

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-18 Thread Dan Rossi
On 19/03/2005, at 2:06 AM, [EMAIL PROTECTED] wrote: the other side of this is blocking legit users. if you base your access (at least in part) on the referrer (aka referer), you will block anyone who has turned them off in their browser or who is behind a firewall that doesn't pass them. both of th

[PHP] Referer checking is able to be referer spoofed

2005-03-18 Thread Dan Rossi
Hi there I am building a syndicate feed system for a client, it is based on referer checking and a id is passed over, I could do what I do with the expired url and generate a random string of some sort to login the user automatically, but then it relies on the third party to have php. I have te

[PHP] Referer checking is able to be referer spoofed

2005-03-18 Thread dan rossi
Hi there I am building a syndicate feed system for a client, it is based on referer checking and a id is passed over, I could do what I do with the expired url and generate a random string of some sort to login the user automatically, but then it relies on the third party to have php. I have te