Support > cpg1.5 plugin contributions

Mask URL Plugin for CPG 1.5.x

<< < (2/8) > >>

allvip:
Great plugin.
Is this going to stop HTTrack Website Copier to download the entire gallery?

marcelm:

--- Quote from: allvip on April 19, 2015, 08:24:20 pm ---Is this going to stop HTTrack Website Copier to download the entire gallery?

--- End quote ---
No, but it will make them using more storage space to keep sequential version because the names differ each iteration.

gmc:

--- Quote from: allvip on April 19, 2015, 08:24:20 pm ---Great plugin.
Is this going to stop HTTrack Website Copier to download the entire gallery?

--- End quote ---
If it drives the link in the html (which will drive the script to unencrypt) then they will get the file (and it appears to in a quick test... )  I'll have to see how usable the resulting site is (running a mirror now).
It certainly won't have the folder structure in the albums directory that it would have without the plugin.

Bottom line - Really can't stop someone from downloading a file that you make visible to the www. You can make it harder or more inconvenient - but if you made it visible - it can (and will) be downloaded by HTTrack, a browser, etc...
HTTrack by default presents itself with a user agent identifying itself - and observes robot.txt restrictions - but both can be easily overridden by the user.

What it stops is them being able to download files you DON'T make visible... ie - your original (fullsize) photos if you only allow viewing of thumbnail and intermediate.
If I know Coppermine's naming, and the path to your thumbnail... I can request the larger photo directly from the filesystem normally.  THIS action is made much more difficult (I tend not to say impossible as the world keeps making better hackers) - as they won't know the path to follow to begin with, and even if they knew the path - the .htaccess (if in place in albums to 'Deny from all') would stop them.


--- Quote from: marcelm on April 19, 2015, 09:19:29 pm ---No, but it will make them using more storage space to keep sequential version because the names differ each iteration.

--- End quote ---
Well... each time you change encryption keys (refreshable in config) - they will think everything is new... it should get ugly for them quickly if you regularly change keys...  Wouldn't be hard to have a cron script change keys even just once a day to drive their storage use much higher... :)

marcelm:
Maybe you an use/rewrite the SEF support that is available in EnlargeIt.

Link to the SEF plugin: http://forum.coppermine-gallery.net/index.php/topic,42568.0.html

ron4mac:

--- Quote from: gmc on April 19, 2015, 09:48:24 pm ---
Well... each time you change encryption keys (refreshable in config) - they will think everything is new... it should get ugly for them quickly if you regularly change keys...  Wouldn't be hard to have a cron script change keys even just once a day to drive their storage use much higher... :)

--- End quote ---
How about using a cookie key for masking/encryption that could be different for each page load, making the urls different every time?

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version