How to block outside sites from using your scrpts?

[cyphix]

Can this be done with .htaccess?

What if I want to allow certain domains to use the scripts also?

Thanks for any help!

[MediaHound]

Usually, scripts output php which in turn is turned into html by the server, or some similar configurtation, etc.
The scripts stay safe on your server. It would involve hacking to get to your scripts.
Unless your script is .js and its in the source of the output anyway.
Could you elaborate on the problem at hand?

[cyphix]

I was just thinking that others might be able to make use of my scripts if they referenced them from their site or something.

[MediaHound]

Depends on who, what, where, when, why, and how, maybe yes, maybe no.
If you are being violated, in your .htaccess add these lines

Order Allow,Deny
Deny from 65.2.1.255
Allow from all

Replace the ip with the ip of the scraper/offender's server.
You can also block a block by leaving off the final 255 (or whatever) and ending with the "."

Hope that helps

[theparrot]

I think what you want to do is set up a list of valid referer's to accept, then is the referal header is not in the list you reject the link. It is not fool proof and easy to work around , but it probably stops 99% of the people that just embede you site in a frame to claim it as their own. You can just make a library routine to do this, and call it from the start of your scripts. It is not usually done with .htaccess as if you did it that way you would also be blocking the user from visting your site directly.

On the other hand if they are reading your script results in, and then outputing the results as their own, the above would work. So it depends on how they are embedding your results and what you want to prevent.

[MediaHound]

BTW, happy b-day, cyphix

[cyphix]

Thanks for the replies guys... & thanks for the bday wish MH! :-D

Basically, I'm more worried about people trying to use my scripts without my knowledge which is why blocking a certain IP wouldn't work.

[MediaHound]

whats the link to the site in action?
I'll take a look at what your trying to describe, (as it's not clear to me), and maybe make a recommendation for you.

[theparrot]

Thanks for the replies guys... & thanks for the bday wish MH! :-D

Basically, I'm more worried about people trying to use my scripts without my knowledge which is why blocking a certain IP wouldn't work.

you need to check the referer: field in the http headers then.

Other option is to require cookies.

[alien]

Use an image verification, it's more effective as they have to input some numbers before they can use the script.

For referer check or IP block, it's rather easy to work around for someone with scripting knowledge.

[cyphix]

Well I think it will be ok as you have to actually be logged in to use the scripts really.. but I thought someone may be able to put some kinda hack together if they tried hard enough..... maybe I'm juat paranoid.

MH.. site is not active just yet so nothing to show really. ;-)

[cwsteam.com]

happy birthday cyphix

[andyat11]

if you still cant find it check hotscripts.com ithink thats it

[cwsteam.com]

just block all and allow your own server IP and the domain itself as the refferrer.