9 messages in ru.sysoev.nginxRe: Prevent hotlinking
FromSent OnAttachments
MaxApr 12, 2009 8:44 am 
Michael ShadleApr 12, 2009 9:40 am 
MaxApr 12, 2009 10:40 am 
Michael ShadleApr 12, 2009 11:29 am 
Gabriel RamugliaApr 12, 2009 11:35 am 
Michael ShadleApr 12, 2009 11:44 am 
Gabriel RamugliaApr 12, 2009 12:00 pm 
Michael ShadleApr 12, 2009 12:05 pm 
Gabriel RamugliaApr 12, 2009 1:00 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: Prevent hotlinkingActions...
From:Michael Shadle (mike@gmail.com)
Date:Apr 12, 2009 11:44:12 am
List:ru.sysoev.nginx

And video embedding is infamous for not sending info. At least windows media player type embedding. Not sure if flash players are better.

On Apr 12, 2009, at 11:35 AM, Gabriel Ramuglia <ga@vtunnel.com> wrote:

Your browser will almost always send referrers. As mentioned, sometimes a security suite will block referrers. Sometimes flash won't send referrers when it makes requests (sometimes it will). You just want to also allow blank referrers in addition to the "correct" referrers.

On Sun, Apr 12, 2009 at 10:41 AM, Max <maxb@gmail.com> wrote:

Hello,

Thanks. I tried that. But it's still not working. I am using wordpress. Don't know what referrer header wordpress send.

On Mon, Apr 13, 2009 at 12:40 AM, Michael Shadle <mike@gmail.com> wrote:

Try

"valid_referers none blocked *.etc.com etc"

perhaps you're not sending a referrer header. Some "internet security suites" do that for "privacy" and I hate them. or malfunctioning browsers or some browsers include that option now.

that's the only thing I see wrong there.

On Sun, Apr 12, 2009 at 8:45 AM, Max <maxb@gmail.com> wrote:

Hello all,

I tried to use the following code to prevent hotlinking. But it blockes myself as well, anyone got any idea?

location ~* (\.jpg|\.png|\.css)$ { valid_referers blocked domain.com *.domain.com; if ($invalid_referer) { return 404; } }

Thanks.