Hi,
I'm looking for a way to protect coursecontent like -images and flash against deeplinking.
Situation 1:
I uploades content like SWF-files in the mediamanager within the course.
I opened the course to read the content. I viewed the pagesource (browser function) and I can see the location and the name of the flashfile. I copied the location, closed the studentsession an pasted this flashlocation in my browser. I can still view this flashfile. Now I can post these flashlocation on forums worldwide and everybody can view this content without paying for the course.
Situation 2:
I created a folder in the docebo-directory. named content. In this folder I uploaded a flashfile. I protect this folder with .htaccess so only accesable out of the docebo-area. I use in the course-html a javascript so this flashfile will appear in a pop-up. (the pop-upscript refers to a htm-file, wich contains the adress of the flashfile. (also this folders contains a htm-file and the reffering flashfile)It al works fine with FF, Chrome, Opera, exept with IE.
After reading some forum-postings I noticed that IE is giving some problems with sending its refferrer!
Using a htaccess-file which is blocking BLANK-REFERRER, IE can not acces this folder because combined with a "flashrequest" it is not sending its referrer! disable this blank-referrer-part in this htacces-file makes this folder vulnerable for deeplink-abuse.
I want to use media like flash opening in a popup the reason for using popups: using a lot of flash and/or movie-files in a course the use of popups decreases the traffic and time the complete page is loades. Only the flashfiles which are chosen by the user wil generate traffic and open in the browser. So when a student is accessing a lession several times, the browser is not opening any popup(with media) until the student has clicked one. Using popups is makes it possible to use different resolutions of media-files and so the user can make a choise for resolution and/or fyletype (eg: swf/mov/avi/quicktime etc)
My question:
How can I use media-files inside docebo without these files being vulnerable for deeplinking
I'm using a popupscript like this:
<script type="text/javascript"><!--
function popUp(URL) {
day = new Date();
id = day.getTime();
eval("page" + id + " = window.open(URL, '" + id + "', 'toolbar=0,scrollbars=0,location=0,statusbar=0,menubar=0,resizable=0,width=800,height=600,left = 560,top = 300');");}
// --></script>
<a href="javascript:popUp('http://www.website.com/content/popup_page.html')"><span><strong>Click here</strong></span><br />Flash about xxx </a>
the page popup_page.html contains the following code:
<html>
<head>
<meta http-equiv="content-type"
content="text/html; charset=ISO-8859-1">
<title> Flash-presentation X</title>
</head>
<body>
<center>
<OBJECT CLASSID="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" WIDTH="800" HEIGHT="586" CODEBASE="http://
active.macromedia.com/flash5/cabs/swflash.cab#version=5,0,0,0">
<PARAM NAME=movie VALUE="flashfile_X.swf">
<PARAM NAME=play VALUE=true>
<PARAM NAME=loop VALUE=false>
<PARAM NAME=quality VALUE=low>
<EMBED SRC="flashfile_X.swf" WIDTH=800 HEIGHT=586 quality=low loop=false TYPE="application/x-shockwave-flash"
PLUGINSPAGE="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash">
</EMBED>
</OBJECT>
</center>
</body>
</html>
so the problem is IE6 and IE7 which is not sending referrers to the server so .htaccess protection against deeplinking does not work
As well by using some firewalls an proxyservers its possible that other browsers as wel can't send the referral to the server it might be blocked by the firewall and/or proxy as well!
So the option .htaccess with blocking blank referrer is not usable for protection.
I there some way to use something with get.php? (i'm not familiar with that).
Maybe there's a possibillity to use some session-ID of some cookies to solve this problem??
I'm also not familiar with that.
I hope somebody can help me
thanks a lot in advance
see also http://www.webmasterworld.com/forum10/2566.htm
and: http://www.experts-exchange.com/Software/Internet_Email/Web_Browsers/Internet_Explorer/Q_22760746.html
