Attention: shaun!!!!

[jIgG]

dude your member areas of musclefantasy.com are hotlinkable from outside and pics can be loaded without a password

[Scorpio]

ooohh that's not good

[Lee]

Just giving this a bump so Shaun can see it

Regards,

Lee

[AusCoding Allan]

Hey shaun, did you see this post yet, I have pm'ed the link to this post so hopefully you have email notifications turned on

Always good to see fellow webmasters looking out for each other

Cheers,

Allan

[shaun]

I unfortunately thought this to be the case....

Okay - what do I do now?

How do I block this (I am NOT the tech person....)

[shaun]

I hit send before I said thankyou ever ever so much!

[basschick]

uh-oh! now the content outside your member area is coming up all errors. when i try to bring up individual graphics, it says "Access forbidden!"

btw, your 2257 page is not legal for u.s. content - you have to have a name and street address.

[shaun]

I tried to rewrite my .htaccess file to prevent hotlinking. That prevented viewing of any files whatsoever. So I took that out of the htaccess, and am now looking for some other anti-hotlinking method.

I dont understand - this:

Order deny,allow
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?muscle-worship.com/.*$ [NC]
RewriteRule \.(gif|jpg|png|mp3|mpg|avi|mov)$ - [F]

SHOULD prevent hotlinking, not prevent all viewing. What did I do wrong?


I will be "fixing" the 2257 requirements today... another frustrating issue as our site is soooo soft that almost none of the photos even come under the perview of the law.... (Ok - now, let's see - if it LOOKS like the models are making love, this is fine, if they are naked, it is fine, if they are naked and touching themselves? Yee Gawds)

[Lee]

Shaun shoot a quick email over to your host and ask them if thy have .htaccess setup to prevent hotlinking, some hosts dont initialize this as standard.

If they do come back and let us know and we will dig out a .htaccess that'll work for you :thumbsup:

Regards,

Lee

[shaun]

we are self hosted -

I was able to get htacces protection set up in the members area - I am not sure why the standard solutions weren't working in the root folders. I dtill havent been able to protect muscle fantasy (problem is that we have 2 domain names pointing at the same dns - I have run into problems with it before...) We are getting that taken care of in a week or so, and in the meantime, I will try and block it using the dns number.

Lee - by the way - I have sent you email, havent heard back yet, and wanted to ask a few questions~!

Thanks,


Shaun

[Lee]

Shaun,

PM me through the board in all honesty unless its a matter of life or death the chances of you getting a reply to email is slim to non

PM's on the other hand i go through every few days :thumbsup:

Regards,

Lee

[Darren Austin]

Scorpio ,
I have that same shirt , I wanted to point that out, LOVE IT .
Also getting to site content without a password=bad

[shaun]

Well - nothing I wrote reguarding htaccess worked - I thought I had protected it - and it was still hotlinkable.

Our tech support guy finally came back to town, and is trying to figure it out now!

Hopefully, he will fix it!

[shaun]

Hi - Okay - I think I put hotlink protection on

http://www.muscle-worship.com (members section)

And I think it may be working on

http://www.musclefantasty.com

and http://www.malemuscle.tv

Can anyone check my work?

If I have failed, please tell me how you discovered my errors - I need to be able to document it!

Thanks so much!


Shaun

[shaun]

I need to be able to check and duplicate these results....

Can anyone check if my sites are still hotlinkable?

Thanks!