| View previous topic :: View next topic |
| Author |
Message |
JohnT2007
-
Joined: 08 Nov 2004
Posts: 9
|
 Posted: Mon Jun 26, 2006 10:06 pm Post subject: Download Tracking |
 |
|
Okay, before I'm chew'd out, I know there is that file limit thing down there but when I used it, one it didnt work, and not to mention a user can just look at the link its going to... say....
mywebsite.com/file_limit/index.php?get=file.zip
And just take out the /file_limit/index.php?get= part and still get the download, without having the limit.
I know there is a good site called PennyWize, but that requires apache, and...apache sucks. Does anyone know of a site/script that will track downloads by IP, and if they go over a bandwidth limit per day/month will stop their account from logging in?
File Limit just didn't seem secure enough, on top of it not working for me... |
|
| Back to top |
  |
 |
AbyssUnderground
-
Joined: 31 Dec 2004
Posts: 3855
|
| Posted: Mon Jun 26, 2006 10:27 pm Post subject: Re: Download Tracking |
|
|
| JohnT2007 wrote: | Okay, before I'm chew'd out, I know there is that file limit thing down there but when I used it, one it didnt work, and not to mention a user can just look at the link its going to... say....
mywebsite.com/file_limit/index.php?get=file.zip
And just take out the /file_limit/index.php?get= part and still get the download, without having the limit.
I know there is a good site called PennyWize, but that requires apache, and...apache sucks. Does anyone know of a site/script that will track downloads by IP, and if they go over a bandwidth limit per day/month will stop their account from logging in?
File Limit just didn't seem secure enough, on top of it not working for me... |
No, they cant. If you look the file is in an encrypted foldername directory that does not show anywhere in the filename. Try so they might, they will not be able to access the file without that script in place.
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk |
|
| Back to top |
 |
|
JohnT2007
-
Joined: 08 Nov 2004
Posts: 9
|
| Posted: Mon Jun 26, 2006 10:37 pm Post subject: |
|
|
tried adding you but your not online, was hopin to get some help, but ill ask here....
What im trying to do is this:
On my webserver, I have large files that I wish to put up for download. I dont have the space, or bandwidth to host them on my actual host...
So...
on my host, I have a downloads section of the site. Say I have.. ... ... Halo up for download (i dont). On my site then I have "Download Halo Now" with a link to my webserver to grab it. For the link i put in...
http://webserver.mysite.com/file_limit/index.php?get=main/games/halo/halo.zip
In my main webserver root i have like
/main/
-Apps/
-Games/
--halo/
---halo.zip
--battlefiled/
---battlefiled.zip
-Movies/
get what im sayin? So on my main web site, the "Download Halo Now" link, what would I put?
I think that all made sense..... :?: |
|
| Back to top |
|
|
TRUSTAbyss
-
Joined: 29 Oct 2003
Posts: 3752
Location: USA, GA
|
| Posted: Tue Jun 27, 2006 12:27 am Post subject: |
|
|
File Limit was written by me to be the most secure File script ever written. It has
an automatic banning and disallows certain characters in the file's path/url. The
next update will use a SQL engine for easier data storage.
I don't think anyone can exploit ::File Limit:: and never will. :-)
Note: As far as taking out the ?get= part and still get the downloads, That's not
true at all. The files can be stored outside of the Web Server root or you can get
Abyss Web Server to ignore the real path to the actual files.
::File Limit:: limits file downloads 100% and I've tested it and test it for this. It
is up to you to configure the script the proper way.
All files go in the "md5 hash" looking folder, which should be located in the
file_limit application directory. Now you can link to them.
Sincerely, TRUSTAbyss |
|
| Back to top |
|
|
JohnT2007
-
Joined: 08 Nov 2004
Posts: 9
|
| Posted: Tue Jun 27, 2006 5:17 am Post subject: |
|
|
| I dont want to have to move all my files though, can I leave them where they are and ... tell the script to secure them there? |
|
| Back to top |
|
|
TRUSTAbyss
-
Joined: 29 Oct 2003
Posts: 3752
Location: USA, GA
|
| Posted: Tue Jun 27, 2006 6:53 am Post subject: |
|
|
Yes. Just edit the config.inc.php file located in the "includes" folder and change
the path to where your files are going to be located.
Note: Changing the Files path does not gurantee you protection from the real
path to your files, so make sure you add an "IP Address Controle" rule in your
Abyss Web Server console in order to disallow access to them. |
|
| Back to top |
|
|
|
