Anti-Leeching Help

mrchuckles2002

Hi, I wonder if you can help.

I want to allow users to download files from my site, the filenames and extensions are held in a mysql database. I want people to be able to download the files only if they come from my site, ie to prevent leechin.

The plan was to send them to an page such as tunedownload.php?id=4

But I want the page not to allow a download unless they come from a link in my site.

Could anyone tell me how I could achieve this?

Thanks.

dalecosp

$_server['http_referer'] ??

mrchuckles2002

Thanks I worked it out.

if (strpos($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST'])>7 ||
         !strpos($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST']))
         die("Bad referer - No Leeching is allowed! Please tell whoever got you here to remove their link.");

AbusiveWombat

dalecosp wrote:
$_server['http_referer'] ??

I thought that http_referer is unreliable?

An alternative method could be to use a $_SESSION variable.