[geeklog-devel] Hiding the image source path

Simon Lord slord at marelina.com
Sat Mar 8 23:30:18 EST 2003


I have been looking for a solution to a minor problem.  Basically I 
want to prevent people from linking directly to images on my site, OR 
WORSE, following the paths in the html source to find other images etc.

After some researching, I found the following solution (see SOLUTION) 
which I find very clever.  The idea is that instead of rendering our 
pages with:

<img src="http://www.geeklog.net/images/geeklog-logo.gif" width="120" 
height="12" border="0">

Which simply invites people to explore the images folder (unless you 
know the exact image name on my server you won't find squat, but many 
don't have this feature). The other problem is that some paths have 
very revealing links.  Image a path such as:

<img src="http://www.geeklog.net/hidden-porn/beach/sandy.gif.....

Well well, users can start editing the link down and try to view each 
directory to see what's there.

SOLUTION:

The solution is to run the image paths through a common php file 
(lib-common is ideal).  The image code would look something like this:

<img src="images.php?try-to-find-me.gif">

The code in the php file can prevent people from using the query from 
pages residing off the server.  So we have a win win situation whereby 
the viewer cannot see the path to the image and they can't copy the 
link to a page on their server as well.

The code to do all this is here:

http://www.experts-exchange.com/Web/Web_Languages/PHP/Q_20403645.html

I'm sure it can be adapted for web page links as well.  And as you all 
know, I can barely scribe my name properly much less code PHP 
skillfully.  I'm hoping someone with little time on their hands can 
find a clever way to get this working in Geeklog.

Thanks.

Sincerely,
Simon




More information about the geeklog-devel mailing list