Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread zcat
1. How do I check for *no* referer field ? Apache usually prints "-" in the log if the referer is not defined. But it depends on whatever you are using to check the referer in the first place. Right. You need to tell us the blocking method you are using. An example is here: http://httpd.apache.or

Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread Joshua Slive
On 5/11/05, Boyle Owen <[EMAIL PROTECTED]> wrote: > > -Original Message- > > From: Uri Raz [mailto:[EMAIL PROTECTED] > > Sent: Mittwoch, 11. Mai 2005 15:05 > > To: users@httpd.apache.org > > Subject: Re: [EMAIL PROTECTED] Apache improvement suggestion > > > > > > Sorry if those question are

Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread Joshua Kugler
On Wednesday 11 May 2005 02:01, Uri Raz wrote: > Problem with that solution is that many surfers block the referrer field > using a proxy or a firewall, including some surfers who browse my site and > legitimately expect the graphics to come up. My idea is to have apache > remember which IP reque

RE: [users@httpd] Apache improvement suggestion

2005-05-11 Thread Boyle Owen
> -Original Message- > From: Uri Raz [mailto:[EMAIL PROTECTED] > Sent: Mittwoch, 11. Mai 2005 15:05 > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] Apache improvement suggestion > > > Sorry if those question are dummy, but - > > 1. How do I check for *no* referer field ? A

RE: [users@httpd] Apache improvement suggestion

2005-05-11 Thread PMilanese
>> I merely stated that this would be expensive on the server side, >No, you haven't (or you haven't provided any arguments to support this >claim). You would not be transferring any more data than you already do. >You would actually be transferring less because you have vastly less TCP >connecti

Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread Arne Heizmann
[EMAIL PROTECTED] wrote: You stated "I always thought it would make a lot more sense to transfer some or all images (and CSS and JS) within the same request as the containing HTML page." Yes, and I still think so. You have mentioned situations where it wouldn't work; so use what we already have i

RE: [users@httpd] Apache improvement suggestion

2005-05-11 Thread PMilanese
>> >> How would dynamic stuff work? >Uuhh the same way as always? >> What if your image is on another server farm? >Uuhh then you use the system we already have? Who are you talking to? You stated "I always thought it would make a lot more sense to transfer some or all images (and CS

Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread Arne Heizmann
[EMAIL PROTECTED] wrote: I've been thinking for almost 10 years now that HTTP is really dumb because it has problems like this one. I always thought it would make a lot more sense to transfer some or all images (and CSS and JS) within the same request as the containing HTML page. Then your problem

RE: [users@httpd] Apache improvement suggestion

2005-05-11 Thread PMilanese
>I've been thinking for almost 10 years now that HTTP is really dumb >because it has problems like this one. I always thought it would make a >lot more sense to transfer some or all images (and CSS and JS) within >the same request as the containing HTML page. Then your problem would go >away b

RE: [users@httpd] Apache improvement suggestion

2005-05-11 Thread PMilanese
Your IP solution is more expensive in my opinion. It is expensive to you, and does little to solve the problem. You are not identifying the client. You are identifying what your server thinks the client is. BIG difference. Especially with the oodles of NATing going on in our lovely world. -O

Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread Arne Heizmann
Uri Raz wrote: Problem with that solution is that many surfers block the referrer field using a proxy or a firewall, including some surfers who browse my site and legitimately expect the graphics to come up. As Joshua already mentioned, this is not a problem as this is a small fraction of the user

RE: [users@httpd] Apache improvement suggestion

2005-05-11 Thread PMilanese
More (probably too much more) on the subject... Many browsers, and others (when the user knows a few things) can fake the refferer, so if it is a serious problem for you, then you 'may' not benefit from any of this. I am drawing up a token system to try to handle this, which may be cookie based.

Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread Uri Raz
Sorry if those question are dummy, but - 1. How do I check for *no* referer field ? 2. Are you sure only 5% of the requests will have no referer field, considering the number of surfers using firewalls ? 3. Why is it you think checking for no referer field is more expensive, server side, than th

Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread Joshua Slive
On 5/11/05, Uri Raz <[EMAIL PROTECTED]> wrote: > Hello, > > I have a problem with object theft on my web site - bloggers & forum > participants link directly to images on my web site, so they get the > content and I get the traffic bill at the end of the site. The solution > suggested to me by th

[users@httpd] Apache improvement suggestion

2005-05-11 Thread Uri Raz
Hello, I have a problem with object theft on my web site - bloggers & forum participants link directly to images on my web site, so they get the content and I get the traffic bill at the end of the site. The solution suggested to me by the hosting company (which uses apache) is to use an '.hta