Printable View
Hi,
tired of people stealing your designs ?
take a look at this contest, you are asked to try to steal a sample image that is being very-well protected, no javascript, no third party software, nothing, a very sample .PHP script !!
this is a link to the contest, it is my new site and this is one of many mechanisms i use :D
Image Protection Contest Link
Enjoy...
ummmm all i got was a square when i viewed any of the links - was that all was suppoused to see!?
ummmmm and yeah it might protect image for like 30 secs until person hits print screen ;)
v_Ln
Well that is not my mistake that there is a print-screen button there on all keyboards ;-)Quote:
ummmmm and yeah it might protect image for like 30 secs until person hits print screen ;)
i am just trying to introduce this small useful script, the matter is not that you a square or not, i can change it to anything you like, the point is that you can never using any regular possible way get a copy of this image, try right clicking and for example click email imaghe to a friend, or set as desktop image, or any other available option, you wont get anything !!!
PS>>
print-screen won't work with watermarked images, or am i wong again folks ??
;-))
enjoy !
I'd simply take a screenshot, dump it into an image editing program, and cut out the square. Take about 30 seconds.....
I guess I would have to ask what you consider a regular possible way to get it? I didn't try a print screen to see if it would work, because I don't have proper graphics sofware on this box.
As far as the other options, the image is set as a background, and I don't think the normal methods of capture will do that. If that is the case, then I think it is a very clever solution.
However, on my other box, I do have a small capture desktop app that will capture whatever is on the screen..and I guess to me, that is a normal method to get what I want. I suppose it is a matter of perception.
I also like the fact that it is simple coding...
EDIT:
"Can you tell me the server path to any of these images, huh ?
Image One
Image Two
Image Three "
Maybe I'm not undersanding the question, but I come up with the following:
http://i.phpx.info/previews/f/mexred
http://i.phpx.info/previews/f/mexgreen
http://i.phpx.info/previews/f/mexblue
You will have to excuse me if I didn't undersand the question posed?
Or just check your cache, because most of what you view ends up there anyway.
Or try a web site grabbing program and get images that way as well, because all the images have to be stored somewhere...Quote:
Or just check your cache, because most of what you view ends up there anyway.
this has been discussed before /me goes looks for thread :::
ahh found it knew GG had done tut on it before -> http://www.antionline.com/showthread...hreadid=239611
there is no foolproof way of protecting your images
well yes can still capture image but will also capture watermark - now as most watermarks are placed some place that will not ruin image itself (bottom right corner a fav) then most can be trimmed off without taking too much away from image itself - or using the heal brush tool in photoshop you can (with a lil time) remove a watermark while leaving image wholeQuote:
print-screen won't work with watermarked images, or am i wong again folks ??
v_Ln
One tool. Webstripper
The image wouldn't be any problem at all to steal.
Hi all and thanks for all the testing, i will make a fast answer for all...
> Juridian,
>groovicus, you are right, the coding is nice and thge images are hidden very well from intruder's eyes, you understood evertthing right it's just my weak english ;-)
>Syini666, cache is being disabled, take a look at this code snippet from the 'preview' script ...
> Drunk On DuvelPHP Code:header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate ("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: private, no-cache, post-check=0, pre-check=0", false);
header("Pragma: no-cache");
i am wondering where this 'somewhere' would be, i agree with you but not in cache as i explained above, maybe Temporary Internet Files ? :confused:Quote:
Or try a web site grabbing program and get images that way as well, because all the images have to be stored somewhere...
>valhallen, you are 100% right, removing watermakrs is easier than making them, and a person who really wants something can get it no matter how hard it is hidden, BUT won't that be illegal to remove a watermark from a copyrighted image :p
>dopeydadwarf, didn't work, read carefully :D
anyweay, that is just another way of doing things, i like sharing info and ideas, don't yale @me ;-))
let's make everything clear!!
QUESTION ?
can you tell me what is the Real Extension of these three images on my server ?
PNG? GIF? JPG?
interesting ?
You're using $PHP_SELF variable in your script in a 404 Webpage Error. The $PHP_SELF is use to output theandQuote:
background="/img/f/mexRed">
html code. I'm a bit surprise that I couldn't download your image using a offline browser but the use of $PHP_SELF in the script reduce ALOT of utilites of your script. The image protect will be only use in one html webpage. :(Quote:
<div id="imgmexRed"
What viewing the sourcecode of the page, finding the picture and going the the picture location and click saveas?
try it ;-)
you disable right clicking simply by making it a background image and then covering it with a clear.gif file.
http://e.phpx.info/images/403/underSkirt.jpg is a pretty cool file though....
I found the images.
The extension is a JPG and here they are:
mexRed.jpg
mexGreen.jpg
mexBlue.jpg
rootdir/img/f/ are where the three images are.
If this is not it, I still got your images for the community to enjoy
if you dont want to share them dont put them on the internet...your as bad as the riaa.
Drunk on Duvel-
Good show, now for the curiouse. How did you do it?
Spare no details please.
Using Teleport Pro. What it does is scan the http directory and downloads the entire website and contents and preserves the directory structure as well. It took a whole five mins to accomplish. It seems when you try to access the image(s) via url, it seems the script redirects you to the "image not found" image.
It's good but not that good.
Never heard of teleport pro. Sounds as if it is similar to webstripper?
Does it have the ability to backup cgi-bin's and the sort?
Either way, I figured it could be accessed with little effort. Thanks again.
*runs off to find teleport pro
No, it does not grab cgi or other server side scripts unless the server permissions allow you to, and I am not that clever.
DoD i shall defeat you - mark my words
muwhahahaha
v_Ln
I am sure you will. :rofl: But I love you anyway heh.Quote:
DoD i shall defeat you - mark my words
muwhahahaha
well I'm realy not sure, but as I get it its .ico am I right? wrong please let me know...anyway good work Man...
Ok, I might be doing it a harder way... but why not just capture the traffic? It HAS to be there... no matter what script hides what.
I took a screen shot of a capture I just did. Got it in less than 30 seconds... ;)
I only did the first picture... but I'd guess that you can get the rest this way too.
ok new challange :::
grab the 3 pics from this page -> http://www.the-ruc.co.uk/nopics/
ok the moving black bar is not on pics - so should not appear...ir no screen captures ;)
it can be done but in my opinion is a lil bit more difficult
v_Ln
btw those are all images just lifted straight from google so dont just trawl it for them - so please post the dir each file is in such as root/pics/pic001.jpg or whatever
v_Ln:
root/yabbse/attachments/image1.jpg
root/yabbse/attachments/image2.jpg
root/yabbse/attachments/image3.jpg
Loved your code too :)
Code:// Action script...
// [Action in Frame 10]
stop();
dud._visible = false;
d2d._visible = false;
d1234d._visible = false;
d4d._visible = false;
d10d._visible = false;
ddd._visible = false;
d3d._visible = false;
d49d._visible = false;
d00d._visible = false;
deed._visible = false;
d278d._visible = false;
d23d._visible = false;
d7d._visible = false;
d5d._visible = false;
d1d._visible = false;
di9d._visible = false;
d86d._visible = false;
d02d._visible = false;
w00t = new Array();
w00t[0] = "what";
w00t[1] = "you";
w00t[2] = "doing";
w00t[3] = "looking";
w00t[4] = "at";
w00t[5] = "my";
w00t[6] = "code";
w00t[7] = "?";
decompiler.onRelease = function ()
{
if (trial = yup)
{
getscript = nope;
}
else
{
trial = nope;
} // end if
getscript = prolly;
} // End of the function
_root.a1.onRelease = function ()
{
d1d._visible = true;
d2d._visible = false;
d3d._visible = false;
} // End of the function
_root.a2.onRelease = function ()
{
d1d._visible = false;
d2d._visible = true;
d3d._visible = false;
} // End of the function
_root.a3.onRelease = function ()
lol DoD - i placed all code on frame 10 (most demo decompilers work up until frame 5)
and then filled first 40 or so lines with gibberish (as most only read first 25)
guess you aint got just a trial ;) what decompiler you use?
I could have encrypted the actionscript but only works on flash 5 atm - and i couldn't be bothered hunting out an old version of it :(
but i will come up with another way - oh yes but i will ;)
v_Ln
My method works too....
It's a family secret.... :)Quote:
guess you aint got just a trial ;) what decompiler you use?
phish - yeah i can't think of any way of beating that :(
you could make it difficult
/me goes makes a flash file that loads 6,000,000 images all labeled pic0000001.jpg, pic0000002.jpg etc hiding 5,999,997 and only displaying needed 3 - might be a lil heavy on bandwith tho ;)
but you'd have fun trawling thro finding right 3 - lol
v_Ln
You're right about that! In that case... I'd use use a print capture. :pQuote:
/me goes makes a flash file that loads 6,000,000 images all labeled pic0000001.jpg, pic0000002.jpg etc hiding 5,999,997 and only displaying needed 3 - might be a lil heavy on bandwith tho
but you'd have fun trawling thro finding right 3 - lol
I'd take forever to figure out which are the right pictures... not to mention how long it'd take to load.
Alright, I wanna get in on this contest. I have looked at the photo for a little bit and it is pretty good. I mean, besides the 30 second print screen possibility ;)..
Hi all,
yes, Drunk on Duvel is right, but 95% and not the whole 100, the files are
mexRed.jpg
MexBlue.jpg
mexGreen.jpg
but the path is wrong, there is no /img/ folder at all .
Thank you all for trying the thing because i really learned more ways to do things, i will now tell you how this thing works, if you are interested of course .
The whole trick is made with two PHP files, one is the preview.php and the other is img.php, i added a couple of lines to the .htaccess file like this ...
RewriteEngine On
RewriteRule ^/preview/(.*)/(.*) /preview.php?folder=$1&image=$2 [L,PT]
RewriteRule ^/preview / [L,PT]
RewriteRule ^/img/(.*)/(.*) /img.php?folder=$1&image=$2 [L,PT]
RewriteRule ^/img / [L,PT]
and here are the .PHP files source code, please notice that for you not to make my mistake, you can make a simple check in them to check if the browser is a known grabber, and redirect him to www.disny.com for example ;-)
preview.php
PHP Code:<?php
/*
This is a sample script that will read the image file and return it as binary data
some kind of safe image storage and display... ;-)
Weedday 10/6/2003 2:14 AM
*/
// Get The Query String
$folder = $HTTP_GET_VARS['folder'];
$image = $HTTP_GET_VARS['image'];
// Was A Folder Specified ?
if (($folder == "") || (!$folder))
{
$folder = "";
}
// Was An Image Specified ?
if (($image == "") || (!$image))
{
$image = "default.jpg";
} else {
// Check it and get its size
// We have an image string passed, lets get its extension
if ((file_exists($folder . "/" . $image . ".GIF")) || (file_exists($folder . "/" . $image . ".gif")))
{
// There is a GIF version
$theImage = $folder . "/" . $image . ".gif";
} elseif ((file_exists($folder . "/" . $image . ".JPG")) || (file_exists($folder . "/" . $image . ".jpg")))
{
// No, There is a JPG Version
$theImage = $folder . "/" . $image . ".jpg";
}
}
// Do we have a valid image string ?
if (($theImage == "") || (!$theImage))
{
// Set A Default File To Open
$default = "default.jpg";
list($width, $height, $type, $attr) = getimagesize("default.jpg");
} else {
//
$default = $theImage;
list($width, $height, $type, $attr) = getimagesize($theImage);
}
$default = $folder . "/" . $image;
echo "
<html>
<head>
<meta http-equiv=\"Content-Type\" content=\"text/html\">
<link rel=\"shortcut icon\" href=\"/favicon.ico\" type=\"image/x-icon\" />
<link rel=\"stylesheet\" href=\"/style.css\" type=\"text/css\" />
<title>phpX(c) Secure Image Viewer</title>
</head>
<body>
<p align=\"center\"></p>
<p align=\"center\"></p>
<div align=\"center\">
<center>
<table border=\"0\" cellpadding=\"0\" cellspacing=\"0\" style=\"border: 2 groove #639ACE\">
<tr>
<td width=\"100%\" background=\"/img/$default\">
<div id=\"img$image\" style=\"position:relative; left:0; top:0; width:$width; height:$height; clip:rect(0,0,0,0); z-index:50; visibility:visible; overflow:hidden;\">
<img src=\"/transparent.gif\" $attr />
</div>
</td>
</tr>
</table>
</center>
</div>
<center>
<p align=\"left\" style=\"width:50%\" class=\"SpecialContent\">
<span class=\"CodeTableX\">[b]Can you tell what is the real extension of this image ? PNG? GIF? JPG?[/b]</span>
Script By: <a href=\"http://www.ereg.info/\">eReg(c) Internet Services</a>, [size="1"]<a href=\"http://www.ereg.info/\" target=\"_blank\">[popUp]</a>[/size]
Discuss it at <a href=\"http://www.xui.info/viewtopic.php?t=13\">XUI(c)</a> forums or <a href=\"http://www.antionline.com/showthread.php?s=&threadid=249384\">AntiOnline™</a> Community
</p>
</center>
</body>
</html>
";
?>
img.php
PHP Code:<?php
/*
This is a sample script that will read the image file and return it as binary data
some kind of safe image storage and display... ;-)
Weedday 10/6/2003 2:14 AM
*/
// First Thing is check if this file has a referal, if not then this is a direct access, we refuse it ;)
function is_valid_referal()
{
global $HTTP_SERVER_VARS;
$allowed_domains = Array("phpx.info", "ereg.info", "xui.info");
foreach($allowed_domains as $value)
{
if(strstr($HTTP_SERVER_VARS['HTTP_REFERER'], $value))
return 1;
}
}
if (is_valid_referal() == 0)
{
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate ("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: private, no-cache, post-check=0, pre-check=0", false);
header("Pragma: no-cache");
header("HTTP/1.1 301 Moved Permanently");
header("Location: /preview/$folder/$image");
header("Connection: close");
} else {
// We have a valid referal, go display the image !!
// Get The Query String
$folder = $HTTP_GET_VARS['folder'];
$image = $HTTP_GET_VARS['image'];
// Was A Folder Specified ?
if (($folder == "") || (!$folder))
{
$folder = "";
}
// Was An Image Specified ?
if (($image == "") || (!$image))
{
$image = "default.jpg";
} else {
// We have an image string passed, lets get its extension
if ((file_exists($folder . "/" . $image . ".GIF")) || (file_exists($folder . "/" . $image . ".gif")))
{
// There is a GIF version
$theImage = $folder . "/" . $image . ".gif";
} elseif ((file_exists($folder . "/" . $image . ".JPG")) || (file_exists($folder . "/" . $image . ".jpg")))
{
// No, There is a JPG Version
$theImage = $folder . "/" . $image . ".jpg";
}
}
// Do we have a valid image string ?
if (($theImage == "") || (!$theImage))
{
// Set A Default File To Open
$default = "default.jpg";
} else {
//
$default = $theImage;
}
// Check The Image And Send It Back To The User
if (!file_exists($default))
{
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate ("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: private, no-cache, post-check=0, pre-check=0", false);
header("Pragma: no-cache");
header("Location: /");
} else {
// Pass The File Content Through....
if (strstr("gif", $default))
{
// This is a GIF image
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate ("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: private, no-cache, post-check=0, pre-check=0", false);
header("Pragma: no-cache");
header( 'Content-type: image/gif' );
} else {
// This is a JPEG Image
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate ("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: private, no-cache, post-check=0, pre-check=0", false);
header("Pragma: no-cache");
header( 'Content-type: image/jpeg' );
}
$file = $default;
$hd = fopen($file,'rb');
fpassthru($hd);
fclose($hd);
}
}
?>
again, I enjoyed it, thanks all, hope you also did !!!
I am sorry, but I am not impressed by any image protection script, and none that I have come across have worked, and this my friend, does not work.
As Tedob1 said, if you do not want your **** stolen, do not place it on the web.
rofl, there are a lot of grabbers out there, and public directory scanners. Good luck.Quote:
and here are the .PHP files source code, please notice that for you not to make my mistake, you can make a simple check in them to check if the browser is a known grabber, and redirect him to www.disny.com for example ;-)
everything you say is ok but i still can't get the point !!
why do you all yale and complain, i had the feeling that this might be interesting for some people, i posetd it, people tried and successed, thats it .
Why am having a feeling like you all hate sharing info ::wink::
The point is simple.
No image protection script has worked so far, and this one does not work either.
If you find a way foolproof way, you will be a millionaire.
And who is "yale"ing and complaining? I am glad you posted the contest and yes we had fun, but it's kinda interesting you got a bit defensive after you got a little egg on the face. Aw c'mon, like you said yourself... time to start adding more protection routines in your code.
i liked this...Quote:
you got a little egg on the face
anyway no-problem@all
greeny mood ;-)
print screan will only work well if it a flat image you are trying to steel. it dont work on anamations..
please correct me if im wrong..
Nightfalls_Girl
No, it does not work on animations, but get the right path and taa daa