Bandwidth thieft / Grabber scripts prevention methods?

[something else]

Seeming grabber scripts are becoming more and more alive on here i was wondering what your best methods of protection are?

maybe:

if(substr_count($_SERVER['HTTP_USER_AGENT'],"php")>0){
header("Location: http://getlost.con");
    exit;
} 

or maybe using a logged in script with headers to hide file locations such as:

header("Pragma: public");
header("Expires: 0");
header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
header("Cache-Control: public");
header("Content-Description: File Transfer");
header("Content-Type: $type");
header("Content-Disposition: attachment; filename=\"$name\"");
header("Content-Transfer-Encoding: binary");
header("Content-Length: " . $size); 

You could use .htaccess to prevent images being stolen such as:

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^http://(.+\.)?mysite\.com/ [NC]
RewriteCond %{HTTP_REFERER} !^$
RewriteRule .*\.(jpe?g|gif|bmp|png)$ http://mysite.com/hotlink.png [L] 

But For Many Mobile Phones They Do Not Support Referer so you need to add a blank No Condition also


any better ideas?

[subzero]

Use anti hotlink in download...

check if isdomain isnowdomain

i liked this look of this script and mite share it

I will share mine soon

[something else]

i use something simular that iv coded myself but you have to login to be able to access the download page rather than rely on HTTP_REFERER as a lot of mobiles dont support it.
So you have to also have a blank domain = "" for referer also which can also cause problems

iv also had a lot of problems with some Nokia n-series phones not being able to download files when using header("Content-Disposition: attachment; filename=\"$name\"");

[softwarefreak]

:D

I've got a cool IDEA, :D

if the site owners makes dynamic css files, None of replacement techniques will work properly :P

No preg_match, No str_replace :P

Just basic demo

<div class="foo">some content</div>

when page is refreshed

<div class="bar">some content</div>

[soul_reaper]

I've got a cool IDEA, :D

if the site owners makes dynamic css files, None of replacement techniques will work properly :P

No preg_match, No str_replace :P

Just basic demo

<div class="foo">some content</div>

when page is refreshed

<div class="bar">some content</div>

if you use preg_replace can be avoided :-?

<?php
$div = preg_replace('|<div class="(.*?)">|is' ,'your div' ,$div);
?>

[softwarefreak]

:D dat was just a basic example, It's not dat easy to grab a page perfectly where the css classes/ids are dynamic :D

[soul_reaper]

:D dat was just a basic example, It's not dat easy to grab a page perfectly where the css classes/ids are dynamic :D

you're right :D