LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > Programming
User Name
Password
Programming This forum is for all programming questions.
The question does not have to be directly related to Linux and any language is fair game.

Notices


Reply
  Search this Thread
Old 08-04-2005, 10:40 AM   #1
vhh
LQ Newbie
 
Registered: Jan 2005
Posts: 11

Rep: Reputation: 0
How to prevent Automated download software


I have a web site to support listening music only. But there are some download softwares like Download Accelerator they can integrate to the browser (Internet Explorer) to get the link from web page content and enable users download files.

I did encrypt HTML code but could not.

Do you know how to prevent them by script (Javascript or any)?

Can I use Javascript to check Windows Registry to stop user if find any download program in there? If so how to do?

Thank you,
 
Old 08-04-2005, 10:45 AM   #2
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
No, javascript cannot access the Windows Registry. And what if they're not using Windows?

If you've placed a file out there for download, they can get it. You could limit the number of requests/hour for a single IP, but that's about it.
 
Old 08-04-2005, 09:10 PM   #3
carl.waldbieser
Member
 
Registered: Jun 2005
Location: Pennsylvania
Distribution: Kubuntu
Posts: 197

Rep: Reputation: 32
If you let users download the music to their players, they can also redirect it to a file. The way some people try to get around this is by encrypting the payload and having special players that can decrypt it so that in theory, the payload is only useful to the application that can play it (and this app has no save function). In practice, because you are giving control of the decrypting software to someone else (so they can play the music), it only becomes a matter of time before someone reverse engineers the decoder.
 
Old 08-05-2005, 06:47 PM   #4
vhh
LQ Newbie
 
Registered: Jan 2005
Posts: 11

Original Poster
Rep: Reputation: 0
Red face

I am using ActiveX of Windows Media Player on the web and disable users look at web content to get URL. But the Automated download software has broken up everything.

You have a good idea about having a own Player like Yahoo!music.

Do you know where to get a player script (Perl or Javascript) that can play WMA or MP3 files?
 
Old 08-05-2005, 09:15 PM   #5
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
How do you "disable users look at web content"? Do you mean, disable viewing of source? I would hope you are aware that it is impossible to prevent people from viewing the source. Also, do NOT use ActiveX. Any sane windows user will have it disabled (I do on my windows box - if they want me to use ActiveX, I don't want their site) not to mention that mac and linux users are completely out of luck.
 
Old 08-06-2005, 06:08 AM   #6
vhh
LQ Newbie
 
Registered: Jan 2005
Posts: 11

Original Poster
Rep: Reputation: 0
Wink

I put the player on a pop-up window with no status, menu, resizeable, address bar.e.t.c. I disabled users using keyboard and right mouse button. It is working now an I dont think people can break it easily, anyway, don't count some high-level Javascript guys

I think of another solution for my case is I will prevent music download from Apache configure (httpd.conf). Following this way, people would not be able to download via the web link like http://mysite/music/file.mp3

The set is (copied from http://www.serverwatch.com):

SetEnvIfNoCase Referer "^http://mysite/cgi-bin/" local_ref=1

<FilesMatch ".(mp3|wma)">
Order Allow,Deny
Allow from env=local_ref
</FilesMatch>


With the set above, users should never download mp3 file from my local folder if they know the music file URL. They have to be under my Perl script and I would have a change to control their accesses.

Any idea?
 
Old 08-06-2005, 01:52 PM   #7
Matir
LQ Guru
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Debian, Arch
Posts: 8,507

Rep: Reputation: 128Reputation: 128
Well, that's one option. All you can do is make it harder for people. Are you sure Download Accelerators don't send the referer header? I know I could certainly fake one. (i.e., netcat)
 
Old 08-07-2005, 04:17 AM   #8
vhh
LQ Newbie
 
Registered: Jan 2005
Posts: 11

Original Poster
Rep: Reputation: 0
The best way has been found

keep secret..

Last edited by vhh; 08-09-2005 at 05:10 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Automated Webhosting Software KePSuX Linux - Software 3 01-19-2006 08:40 PM
where can i download linux software jojojo Linux - Newbie 7 05-15-2005 03:08 PM
Find a download software MyRee Linux - Software 2 05-19-2004 11:23 AM
Download Resumable software?? Phonics3k Linux - Software 2 06-23-2002 08:57 PM
Conventions for download software bobirt Linux - General 3 12-31-2001 08:43 AM

LinuxQuestions.org > Forums > Non-*NIX Forums > Programming

All times are GMT -5. The time now is 12:46 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration