Image tracking

by "David Clapper" <dclapper(at)clioassociates.com>

 Date:  Fri, 29 Jun 2001 07:29:35 -0700
 To:  hwg-techniques(at)hwg.org
  todo: View Thread, Original

Hello all,

I found this when I was browsing the Apache site.  If it's already
been mentioned, I apologize.  The relevant page is http://httpd.apache.org/docs/env.html
---------------------------------------------------------
Prevent "Image Theft"
This example shows how to keep people not on your server from
using images on your server as inline-images on their pages.
This is not a recommended configuration, but it can work in limited
circumstances. We assume that all your images are in a directory
called /web/images.
    SetEnvIf Referer "^http://www.example.com/" local_referal
    # Allow browsers that do not send Referer info
    SetEnvIf Referer "^$" local_referal
    <Directory /web/images>
       Order Deny,Allow
       Deny from all
       Allow from env=local_referal
    </Directory>
Note: spelling of 'referer' and 'referal' is intentional. 
For more information about this technique, see the ApacheToday
tutorial "Keeping Your Images from Adorning Other Sites" (http://apachetoday.com/news_story.php3?ltsn=2000-06-14-002-01-PS).


David Clapper 
Vice-President & Chief Architect 
Clio Associates 
70 Pavilion St. 
Rochester, NY 14620 USA 
Voice: +1.716.442.5407 
Fax: +1.716.442.5993 
Cell: +1.716.259.3699 
e-mail: dclapper(at)clioassociates.com 
PGP public key ID: 0xC67E9E98 

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA