Re: Prevent Hot Linking

2009-05-04 Thread Hassan Schroeder
On Mon, May 4, 2009 at 6:03 AM, Andre-John Mas wrote: > I have seen some site block images from being loaded if the referrer is not > the site in question. I don't know if this is possible with Tomcat? Easily done with a Filter, except that: 1) The referrer header is not required by the spec. 2

Re: Prevent Hot Linking

2009-05-04 Thread Andre-John Mas
On 19-Apr-2009, at 12:22, Graeme Kidd wrote: Thanks André, urlrewrite seems a suficiant solution for now as I only want to block people if they try and acess the file from outside my domain. If my understanding is correct blocking by IP although harder to fake would prevent them no matt

RE: Prevent Hot Linking

2009-04-19 Thread Graeme Kidd
Thanks André, urlrewrite seems a suficiant solution for now as I only want to block people if they try and acess the file from outside my domain. If my understanding is correct blocking by IP although harder to fake would prevent them no matter what. There is an example given in the urlrewri

Re: Prevent Hot Linking

2009-04-19 Thread Hassan Schroeder
On Sun, Apr 19, 2009 at 7:37 AM, André Warnier wrote: > But basing the acceptance or rejection on a HTTP request header sent by the > browser is not absolutely secure, in the sense that this can easily be faked > using any HTTP client agent such as wget, curl, lwp-request etc.. True. But it seem

Re: Prevent Hot Linking

2009-04-19 Thread André Warnier
David Smith wrote: I think you got it right the first time. The OP wants to make sure the referrer header is present and starts with http://www.mydomain.com as opposed to http://www.anotherdomain.com. It'll help prevent other sites from linking directly to resources on the OP's site. Basic

Re: Prevent Hot Linking

2009-04-19 Thread David Smith
I think you got it right the first time. The OP wants to make sure the referrer header is present and starts with http://www.mydomain.com as opposed to http://www.anotherdomain.com. It'll help prevent other sites from linking directly to resources on the OP's site. -- David On Apr 19, 20

RE: Prevent Hot Linking

2009-04-19 Thread Martin Gainty
légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. > From: coolki...@hotmail.com > To: users@tomcat.apache.org > Subject: Prevent Hot Linking > Date:

Re: Prevent Hot Linking

2009-04-19 Thread André Warnier
André Warnier wrote: Graeme Kidd wrote: Hi, Is there a way to configure tomcat to prevent some one from downloading a file I host when they are not within my domain? You may want to have a look here : http://tuckey.org/urlrewrite/ It's a bit like the Swiss Army knife for this kind of thing

Re: Prevent Hot Linking

2009-04-19 Thread André Warnier
Graeme Kidd wrote: Hi, Is there a way to configure tomcat to prevent some one from downloading a file I host when they are not within my domain? You may want to have a look here : http://tuckey.org/urlrewrite/ It's a bit like the Swiss Army knife for this kind of thing. You would normally do

Prevent Hot Linking

2009-04-18 Thread Graeme Kidd
Hi, Is there a way to configure tomcat to prevent some one from downloading a file I host when they are not within my domain? For example I have a file hosted here: www.mydomain.com/mypage/file.xml That is listed on a page here: www.mydomain.com/mypage/mypage.html They will have no proble