Re: [PHP] Framed & Linked Content

2008-01-30 Thread Per Jessen
Richard Lynch wrote: > On Tue, January 29, 2008 10:32 am, Per Jessen wrote: >> Robert Cummings wrote: >> >>> The only remedy agaonst remote linking is to embed some kind of >>> expiration in the link that accesses the document. >> >> Wouldn't a check of the REFERER field be enough to disable most

Re: [PHP] Framed & Linked Content

2008-01-30 Thread Michael McGlothlin
The only remedy agaonst remote linking is to embed some kind of expiration in the link that accesses the document. Wouldn't a check of the REFERER field be enough to disable most remote links? (I know it is easily forged.) Normal users also use browsers which choose not to send i

Re: [PHP] Framed & Linked Content

2008-01-30 Thread Richard Lynch
On Tue, January 29, 2008 10:32 am, Per Jessen wrote: > Robert Cummings wrote: > >> The only remedy agaonst remote linking is to embed some kind of >> expiration in the link that accesses the document. > > Wouldn't a check of the REFERER field be enough to disable most remote > links? (I know it

Re: [PHP] Framed & Linked Content

2008-01-30 Thread Richard Lynch
On Tue, January 29, 2008 9:21 am, Mike Potter wrote: > There is JavaScript out there, to make a page break out of frames if > someone else has your page in a frame of theirs. > Is it possible to do this with PHP or is that the wrong side of > Server/Client-side operations? PHP is the wrong side of

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Robert Cummings
On Tue, 2008-01-29 at 17:50 +0100, Per Jessen wrote: > Robert Cummings wrote: > > > > > On Tue, 2008-01-29 at 17:32 +0100, Per Jessen wrote: > >> Robert Cummings wrote: > >> > >> > The only remedy agaonst remote linking is to embed some kind of > >> > expiration in the link that accesses the do

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Per Jessen
Per Jessen wrote: > Well then - for people who've disabled it, there's no remote linking > to your content. All done. Btw, apache does a good job of dealing with remote links: RewriteCond %{HTTP_REFERER} !^https?://jessen.ch/ RewriteRule /images/(.*) http://jessen.ch/no-remote-linking-please?it

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Per Jessen
Robert Cummings wrote: > > On Tue, 2008-01-29 at 17:32 +0100, Per Jessen wrote: >> Robert Cummings wrote: >> >> > The only remedy agaonst remote linking is to embed some kind of >> > expiration in the link that accesses the document. >> >> Wouldn't a check of the REFERER field be enough to disa

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Robert Cummings
On Tue, 2008-01-29 at 17:32 +0100, Per Jessen wrote: > Robert Cummings wrote: > > > The only remedy agaonst remote linking is to embed some kind of > > expiration in the link that accesses the document. > > Wouldn't a check of the REFERER field be enough to disable most remote > links? (I kno

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Per Jessen
Robert Cummings wrote: > The only remedy agaonst remote linking is to embed some kind of > expiration in the link that accesses the document. Wouldn't a check of the REFERER field be enough to disable most remote links? (I know it is easily forged.) /Per Jessen, Zürich -- PHP General Mailin

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Robert Cummings
On Tue, 2008-01-29 at 11:12 -0500, Jason Pruim wrote: > On Jan 29, 2008, at 10:58 AM, Robert Cummings wrote: > > > > > On Tue, 2008-01-29 at 10:21 -0500, Mike Potter wrote: > >> There is JavaScript out there, to make a page break out of frames if > >> someone else has your page in a frame of thei

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Jason Pruim
On Jan 29, 2008, at 10:58 AM, Robert Cummings wrote: On Tue, 2008-01-29 at 10:21 -0500, Mike Potter wrote: There is JavaScript out there, to make a page break out of frames if someone else has your page in a frame of theirs. Is it possible to do this with PHP or is that the wrong side of Serv

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Robert Cummings
On Tue, 2008-01-29 at 10:21 -0500, Mike Potter wrote: > There is JavaScript out there, to make a page break out of frames if > someone else has your page in a frame of theirs. > Is it possible to do this with PHP or is that the wrong side of > Server/Client-side operations? PHP can echo the JavaS

Re: [PHP] Framed & Linked Content

2008-01-29 Thread Per Jessen
Mike Potter wrote: > There is JavaScript out there, to make a page break out of frames if > someone else has your page in a frame of theirs. > Is it possible to do this with PHP or is that the wrong side of > Server/Client-side operations? I haven't checked, but I'm wondering if the REFERER field