original work

[metulj]

...the only protection im aware of is obfuscation (which can work quite well if you do it properly)...

any 'live' example for this?
i'd like to check how good protection that is

[ozziemale31]

i dont have a signup page for my new script im writing atm lol

[ozziemale31]

i just relised it isnt so secure lol i just viewd my source

[djlee]

any 'live' example for this?
i'd like to check how good protection that is

nope since i dont have a reason to bother with this. however the basic premise is

1. all on one line
2. use stupid css names (instead of #inputUsername use #h2A8s)
3. no comments at all

the idea is to make it as hard as possible for someone to use the stylesheet without heavily modifying it and days of figuring out what each css name belongs too. Ofcourse the all in one line thing can be solved by chucking the line into a beautifyer engine, but its just a simple thing to do , its actually recommended for performance tweaks and if its a n00b stealing the css he may not have even heard of a beautifyer. If you put all the CSS into one sheet and use names that are hard to differentiate on scanning, you will literally force the user to go through the css file bit by bit, and on finding each css name/id he will have to view the source of every page on your site until he finds what that name belongs to (if you mix up the css so you have gallery only css thrown all over it will be even harder).

I think thats the best way to describe it anyway. i could post a bit of example html/code but you wouldnt realise its effectiveness on such a small example. Deployed on a full site though its usually enough to make people think bugger it (unless they create their own css using the design on your site, but thats not a copy and paste of your css and theres nothing you can do about that unless you dig their eyeballs out)

[ozziemale31]

i used rewrite in htaccess and a code on my index page and style page but its not safe on mozilla linux

[djlee]

interesting, but i dont see how that would be any better than the normal way. the css file is downloaded after the html page on a sperate stream, essentially the browser goes to the link specified in the style tag and saves the text output. The browser does nothing differently to what the user would do if they did it manually. But i could be wrong, cant see how though

[ksg91]

wtf guys! are you discussion to protect css! how stupid it is to save our css from others! css isnt a big deal.

ok well, if discussion is going so let me suggest something. you may disable right click on the page using javascript so an ordinary user wont be able to see your html/css source.

[metulj]

wtf guys! are you discussion to protect css! how stupid it is to save our css from others! css isnt a big deal.
ok well, if discussion is going so let me suggest something. you may disable right click on the page using javascript so an ordinary user wont be able to see your html/css source.

even if you disable right click...
still very very simple to get css properties...
------------------------------------------
as said many times... it is a total waste of time
securing css files/s...
if someone copy your style,
means you did solid one,
or at least someone is trying to learn some basics...
either way.. really nothing to worry about

[djlee]

wtf guys! are you discussion to protect css! how stupid it is to save our css from others! css isnt a big deal.

ok well, if discussion is going so let me suggest something. you may disable right click on the page using javascript so an ordinary user wont be able to see your html/css source.

Your wondering how stupid a thread is dicussing how to protect css (basically), then u suggest the one solution that NEVER has worked. Theres 100's of plugins that disable javascript on pages unless you allow them, and the source view is still available via the browser menu. So my comment still remains the only decent way to protect a piece of code that must be available in standard form to the browser and therefore the user is via obfuscation

[subzero]

<Files *.css>
Order deny,allow
deny from all
Allow from localhost
Allow from Your Domain
</Files>

RewriteEngine on
RewriteRule coreset.css coreset.php

session_start();
$_SESSION['csskey'] = "hello";

<?php
session_start();
header("Content-type: text/css");

if ($_SESSION["csskey"] != "hello") {
    die("Protected");
}

$_SESSION["csskey"] = "somethingelse";
?>

<?php
require_once("2pac.css");
?>

Easy

[carebear]

nobody can steal my new style css for mobilezonez lol care to try ?????

Mobilezonez

I figured out how to protect css lol go me roflmao

Hey Andy Bro what u main no one can get ur css? hahaha look... http://mobilezonez.net/andy/style.css body {
background-color : #000000;
color : #000000;
font-family : arial;
font-size : medium;
margin : 0;
padding : 0;
margin : 3px auto;
max-width : 750px;
margin-bottom : 3px;
border : 1px solid #000000;
}
img.logo {
margin-top : 1px;
}
a {
color : #ffffff;
}
a.cat {
color : #ffffff;
}
a.pro {
color : #ffffff;
}
a.nav {
color : #ffffff;
}
a:active, a:hover {
color : #0000ff;
text-decoration : underline;
}
.text {
color : #ffffff;
}
.textbox {
color : #ffffff;
text-align : center;
}
.text_black {
color : #000000;
}
.text_small {
color : #ffffff;
font-size : small;
}
.title {
background-color : #8a9296;
}
.mainteaser {
background-color : #000044;
border : 2px groove blue;
font-family : arial, verdana, ms sans serif;
font-weight : bold;
font-size : 8pt;
margin : 0;
border-top : 2px solid #0000aa;
border-bottom : 2px solid #0000aa;
}
.mainteaser_text {
background-color : #000044;
color : #ecf0f1;
text-align : center;
padding : 2px;
margin : 0;
font-size : medium;
font-weight : bold;
}
#inputText {
background-color : #ffffff;
color : #000000;
border : 1px;
}
.alt2 {
color : #ffffff;
font-size : small;
}
p.c4 {
text-align : center;
}
hr.c3 {
color : blue;
background-color : blue;
height : 2px;
border : none;
}
div.c2 {
text-align : center;
}
p.c1 {
text-align : right;
}
p.c3 {
text-align : right;
}
input {
background-color : black;
border : 2px groove blue;
color : green;
font-family : arial, verdana, ms sans serif;
font-weight : bold;
font-size : 8pt;
}
input:hover {
background-color : blue;
color : red;
border : 2px groove blue;
font-family : arial, verdana, ms sans serif;
font-weight : bold;
font-size : 8pt;
}
button {
border : 1px solid blue;
background : #ccf;
}
button:hover {
border : 1px solid blue;
background : blue;
}
label {
display : block;
width : 150px;
float : left;
margin : 2px 4px 6px 4px;
text-align : right;
}
br {
clear : left;
}
inputtext {
border : 2px groove blue;
color : black;
font-family : arial, verdana, ms sans serif;
font-weight : bold;
font-size : 8pt;
} its not that hard to get some ones css...

[DiL]

Here is mobilezonez style.css

 

body {
background-color : #000000;
color : #000000;
font-family : arial;
font-size : medium;
margin : 0;
padding : 0;
margin : 3px auto;
max-width : 750px;
margin-bottom : 3px;
border : 1px solid #000000;
}
img.logo {
margin-top : 1px;
}
a {
color : #ffffff;
}
a.cat {
color : #ffffff;
}
a.pro {
color : #ffffff;
}
a.nav {
color : #ffffff;
}
a:active, a:hover {
color : #0000ff;
text-decoration : underline;
}
.text {
color : #ffffff;
}
.textbox {
color : #ffffff;
text-align : center;
}
.text_black {
color : #000000;
}
.text_small {
color : #ffffff;
font-size : small;
}
.title {
background-color : #8a9296;
}
.mainteaser {
background-color : #000044;
border : 2px groove blue;
font-family : arial, verdana, ms sans serif;
font-weight : bold;
font-size : 8pt;
margin : 0;
border-top : 2px solid #0000aa;
border-bottom : 2px solid #0000aa;
}
.mainteaser_text {
background-color : #000044;
color : #ecf0f1;
text-align : center;
padding : 2px;
margin : 0;
font-size : medium;
font-weight : bold;
}
#inputText {
background-color : #ffffff;
color : #000000;
border : 1px;
}
.alt2 {
color : #ffffff;
font-size : small;
}
p.c4 {
text-align : center;
}
hr.c3 {
color : blue;
background-color : blue;
height : 2px;
border : none;
}
div.c2 {
text-align : center;
}
p.c1 {
text-align : right;
}
p.c3 {
text-align : right;
}
input {
background-color : black;
border : 2px groove blue;
color : green;
font-family : arial, verdana, ms sans serif;
font-weight : bold;
font-size : 8pt;
}
input:hover {
background-color : blue;
color : red;
border : 2px groove blue;
font-family : arial, verdana, ms sans serif;
font-weight : bold;
font-size : 8pt;
}
button {
border : 1px solid blue;
background : #ccf;
}
button:hover {
border : 1px solid blue;
background : blue;
}
label {
display : block;
width : 150px;
float : left;
margin : 2px 4px 6px 4px;
text-align : right;
}
br {
clear : left;
}
inputtext {
border : 2px groove blue;
color : black;
font-family : arial, verdana, ms sans serif;
font-weight : bold;
font-size : 8pt;
}

[djlee]

not a bad idea for protecting the css sub, but i doubt its worth it really. You would still very easily be able to copy and paste the css from the source, and if anything your hurting the site as the css wont be cached which means more bandwidth used (only affects high traffic sites i guess), longer page load times (as your sending more data) and generally not worth its salt.

But its given me an idea how we can protect css using a css filtering system. It wouldnt be easy for people to implement as they would have to change the display of their entire code but what im thinking is

1. create a translation table for the css
2. instead of using echo on each output line, concat all the output to a variable
3. pass the variable through the translation script to input the css inline with elements
4. echo the translated variable

while it would still not be cached, it would provide a hell of a lot more protection. Id go as far to say that someone would REALLY want to have you design as it would take ages to strip it all out. Maybe i'll throw up some example code for it when im not so busy, but i still say obfuscation is mostly sufficient enough to put 99% of people off.

[ksg91]

even if you disable right click...
still very very simple to get css properties...
------------------------------------------
as said many times... it is a total waste of time
securing css files/s...
if someone copy your style,
means you did solid one,
or at least someone is trying to learn some basics...
either way.. really nothing to worry about

Your wondering how stupid a thread is dicussing how to protect css (basically), then u suggest the one solution that NEVER has worked. Theres 100's of plugins that disable javascript on pages unless you allow them, and the source view is still available via the browser menu. So my comment still remains the only decent way to protect a piece of code that must be available in standard form to the browser and therefore the user is via obfuscation

lol guys that what i said. it can help protect users who have not much knowledge. and who really cares about css? thank god someone didnt said he want to protect his html source!

not a bad idea for protecting the css sub, but i doubt its worth it really. You would still very easily be able to copy and paste the css from the source, and if anything your hurting the site as the css wont be cached which means more bandwidth used (only affects high traffic sites i guess), longer page load times (as your sending more data) and generally not worth its salt.

But its given me an idea how we can protect css using a css filtering system. It wouldnt be easy for people to implement as they would have to change the display of their entire code but what im thinking is

1. create a translation table for the css
2. instead of using echo on each output line, concat all the output to a variable
3. pass the variable through the translation script to input the css inline with elements
4. echo the translated variable

while it would still not be cached, it would provide a hell of a lot more protection. Id go as far to say that someone would REALLY want to have you design as it would take ages to strip it all out. Maybe i'll throw up some example code for it when im not so busy, but i still say obfuscation is mostly sufficient enough to put 99% of people off.

if someone really wants your css then he may also gather it from inline css.

i would say that who cares so much for his/her css really dont worth to be a coder.

[djlee]

1. no ones saying css or html is 100% protectable, ive never said it was and i never would. no client side language can be protected
2. inline css is a **** load harder to steal, on one of my project sites i have a main css file consisting of >100 id's and classes, add on top of that 12 per page stylesheets with around 25 each and thats a lot of inline css to root through, i very much doubt anyone would attempt to steal the full design from the source view.
3. You cant say anyone who wants to protect their works isn't worthy to be a coder, on that statement id argue your one of the worst coders here since you dont have the ability to realise that a site can be made or broke on its chosen design and layout and once that is cloned you no longer are a unique site, users dont care who come first with the design, if your a decent site then you will be forced to change your design (unless ofcourse your design is so basic that it was never originally considered unique... like facebook)
4. anyone that has an avatar containing the words "alt" and "f4" doesnt deserve posting privileges and really needs to find some more up to date computer funnies.