Disabling Image Hotlinking on IIS Server
- Thread starter Suncoty
- Start date
SubSpace
Bass
Normally this is done using ASAPI filters I guess, but you can't install those.
An alternative is the ASP.net method, make a class implementing the IHttpModule class, add it to your web.config and you should be able to handle these requests.
Looked on Google a bit, since someone was bound to have made something like this. And indeed, I think this will do what you want it to:
http://www.irritatedvowel.com/Programming/DeepLinkingHttpModule.aspx
Edit: Hmm, it seems you still need to enable ASAPI filter processing for image files to make this work. Perhaps JodoHost can be of assistance, after all it's a semi standard request.
An alternative is the ASP.net method, make a class implementing the IHttpModule class, add it to your web.config and you should be able to handle these requests.
Looked on Google a bit, since someone was bound to have made something like this. And indeed, I think this will do what you want it to:
http://www.irritatedvowel.com/Programming/DeepLinkingHttpModule.aspx
Edit: Hmm, it seems you still need to enable ASAPI filter processing for image files to make this work. Perhaps JodoHost can be of assistance, after all it's a semi standard request.
Change the picture and play a joke on them 
Anyway, the reason we don't do any DLLs is because we don't know what code they could contain. However, if what you wish to install is made from a reliable software maker, and is used in shared hosting environments, we'd definately consider installing it
Anyway, the reason we don't do any DLLs is because we don't know what code they could contain. However, if what you wish to install is made from a reliable software maker, and is used in shared hosting environments, we'd definately consider installing it
SubSpace
Bass
Yash, that shouldn't be an issue with the solution I provided above. The ASAPI DLL that's being added is a Microsoft standard DLL, and enables the use of the IHttpModule mechanic for .jpg files.
The actual handling is done by the customer's .net code, but that code has the same restrictions as any other ASP.net script he would write, so there is no security issue.
The actual handling is done by the customer's .net code, but that code has the same restrictions as any other ASP.net script he would write, so there is no security issue.
WebDeveloper
Perch
You can also use the SendBinary method of the Persits AspJPEG component when linking to your images via your site.
Ie. <img src="http://www.yourdomain.com/SendBinary.asp?Image=thisimage.jpeg">
More info: http://www.aspupload.com/aspjpeg.html
Although this won't do anything to prevent your current hotlinkers (unless you move the images to a new directory).
Ie. <img src="http://www.yourdomain.com/SendBinary.asp?Image=thisimage.jpeg">
More info: http://www.aspupload.com/aspjpeg.html
Although this won't do anything to prevent your current hotlinkers (unless you move the images to a new directory).
SubSpace
Bass
The DLL is already on the system, as it's installed with the .NET framework and called for ASP.net scripts. On my home machine it's C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
A mapping would have to be added for the extension .jpg, and possibly .png or some other extension to be protected.
It's probably best to add this mapping for this particular customer's site only though.
In fact, it would be very nice if this kind of mapping was manageable in H-Sphere, JodoHost would just provide a list of installed and authorized DLLs, and customers could create mappings from any extension to these DLLs. Think I'll post it on the PSoft forum
A mapping would have to be added for the extension .jpg, and possibly .png or some other extension to be protected.
It's probably best to add this mapping for this particular customer's site only though.
In fact, it would be very nice if this kind of mapping was manageable in H-Sphere, JodoHost would just provide a list of installed and authorized DLLs, and customers could create mappings from any extension to these DLLs. Think I'll post it on the PSoft forum
Yash said:
Done. Ticket #7751 if there are any questions. Didn't have a particular link but I mentioned the info in the post above about the path to the file on his local machine. I mentioned in the ticket that it's probably already on the server in the .NET framework.
Thanks again, Yash.
Michael
TRodriguez
Guppy
Another thing you can look at is this:
http://www.michaelbrumm.com/leechblocker.html
It's open source so you need not to worry about the contents. It checks the referers on image requests and allow the request only it's from within the same domain, it can be configured to display an advertising image or allow certain referers, etc.
http://www.michaelbrumm.com/leechblocker.html
It's open source so you need not to worry about the contents. It checks the referers on image requests and allow the request only it's from within the same domain, it can be configured to display an advertising image or allow certain referers, etc.