Desperate -- coding -- Please help

lmse2002

Is there anyone out there?
Does anyone know?

2 issues

Using a single .html template, based on a hyperlink's call,
the template fills with specific thumbs
Example:
Photos of Apples
Template pops up: page 1 of 8, images 1 - 20, of apples

Photos of Bears
Same template pops up: page 1 of 3, images 1 - 20, of bears -- etc.

I need a program that will stop the visitors/surfers
from gaining access to page info (photo's) source code.
Example:
Right Click save as
Select all
Properties (general)
url: address shows
Can Not Show url address at all
Only Show a PHP Code link somewhere else.

Example:
Visitor clicks on a hyperlink to an image
value of hyperlink is passed to a function (asp, php, cgi, ?)
Image is returned in new pop up
surfer is unable to trace image location on our server

Will pay if needed. lmse2002@hotmail.com
😕

frigidman

#2
I need a program that will stop the visitors/surfers
from gaining access to page info (photo's) source code.

This is basically imposible to prevent, because if someone wants that info, they can easily get it by adjusting the browser (if you try to prevent it with javascript).

Suggestion: Don't worry about it. If you don't want someone to know the image location on your server, then the only way to stop them, is to just not put any images up =) Sorry, but that is just how the web works.

As for issue #1... you need to turn that .html into a .php application and handle everything using some php code to page through multiple pages/types, and pass URL arguments to itself to show the next page of a certain type. This is a large thing to explain, and goes down the line of contracted work for most everyone here. You will need to either find someone to make this for you, or try reading up on some massive PHP programming manuals to build something yourself from the ground up.

You could also try searching for some free PHP scripts already built out there that might do somewhat what you are looking for.

frigidman

Let me ammend that about #2.

You could get around it by tunneling all the image data through a singular PHP script that takes an argument of what image to display.

This is REALLY messy though, and is really more trouble than its worth. Because even though you are now not showing the path to the raw image on the server... people can still use that PHP link with argument to still get the image.

In all honesty... you don't have to be that sneaky. You just end up making more work for yourself than needed. If someone wanted to steal your image, they could simply just right click it and save the image to their drive, and then put that image up on their own website. No way of preventing that, and going to great lengths to 'hide' an open URL, is just ... well ... wasteful for you.

I'm just trying to save you some trouble =)

rrijnders

Obviously Imse doesn't care if the visitor sees the image he is expressly feeding to their browser; he just doesn't want them to be able browse the image directory directly and steel all the other images (for free). Probably creating an "images for sale" script or something to that effect.

Creating an image server script is not all that messy, I have done it many places. You just have to make sure the image naming conventions and arguments to the script are not predictable; Naming the image arguments "img001.jpg", "img002.jpg" is pointless because they can guess the names of other images to pass to the script. It should also check the referer variable to make sure it was called from your page and not some hack script.

Basically, it works like this:

<<<page the visitor sees>>>

<HTML>
  <HEAD>My Page</HEAD>
  <BODY>
  Here is a picture you can view!<BR>
  <IMG SRC="showimage.php?id=xf048t">
  </BODY>
</HTML>

Then "showimage.php" uses the image id passed to it by your <IMG> tag and:

checks the page referer to make sure the request came from one of your own pages
retrieves the appropriate image from a secret directory that is outside of the web server's document tree
outputs the correct headers to the browser for the image type
outputs the image stream to the browser
[/list=a]

This technique will work fine for most purposes.

scottrad

to not browse the dir you should and an empty index page in the image dir. A person will always be able to get the picks because in the end they can take a screen shot!😃

johnassis

I would even go as far as storing the images in a database instead of in the file system, the referer check is a very good idea.