[RESOLVED] [HELP] Getting hotlinking site URL?

aqeelsfolio · 06-29-2006, 10:17 AM

Is it somehow possible to get the url of the page that is hotlinking that .swf??

Ray Beez · 06-29-2006, 03:45 PM

Check your server logs. That's one way.

You could have some code that silently hits a PHP script on your server, send "URL" to it.

aqeelsfolio · 06-30-2006, 05:18 AM

Quote:

Originally Posted by Ray Beez

Check your server logs. That's one way.

You could have some code that silently hits a PHP script on your server, send "URL" to it.

server logs are showing no referer becasue they are loaded by flash player not that website page.

yes i can post "_url" silently to php script on my server, but that "_url" will only tell the the url of the .swf (which is my site), but I need the url of the page that is hotlinking .swf hosted on my website.

Fall_X · 06-30-2006, 05:24 AM

This could be bad advice, maybe you can do something a lot simpler, I haven't looked into this much, but you could try getting document.location through javascript interfacing, and then send it to a php script with flash. Just a thought.

**tonypa** · 06-30-2006, 05:37 AM

Sadly there is no easy and simple way to read url of html page into swf.

aqeelsfolio · 06-30-2006, 06:41 AM

Quote:

Originally Posted by Fall_X

This could be bad advice, maybe you can do something a lot simpler, I haven't looked into this much, but you could try getting document.location through javascript interfacing, and then send it to a php script with flash. Just a thought.

How can I do javascript interfacing in flash, do you mean that "fscommand"?
But that webpage is not mine, i can only do things in .swf.

Fall_X · 06-30-2006, 07:30 AM

It might be a bit complicated, and there might be other (better) ways, but you could try something like this. Using getURL you can execute javascript in the user's browser. However, as far as I know, this can not return anything to the swf directly. Thankfully, javascript can also interact with flash (the other way round), as described here : http://www.permadi.com/tutorial/flashjscommand/
Now, you'd need a way to find the swf's name in the browser for this to work, but I can imagine that by looping through all objects and seeing if they have a certain property (using GetVariable), you can find the right object. There may be an easier way too, don't know. After you find the swf, you can send it a variable with the document.location.
So to make it all work, your swf should contain a one-line string (with the javascript that finds the swf, gets the location, and sends it to the swf), and pass this string to the browser using getUrl("javascript:"+browserCheckScript); or something like that.

Your javascript-string can also just check the document.location, and if it's not the one you intended, you can change it to your site, which should also store the referer in your logs. This way, you won't have to bother finding the swf object with javascript.

Note : I have not tried any of this myself, and it's a bit clumsy, but it might work

Fall_X · 06-30-2006, 07:53 AM

Here you go, just tested it and seems to work fine in IE, Opera and Firefox :

Code:

getURL("javascript:if(top.location!='http://myUrl'){top.location='http://myUrl';}","_top");

aqeelsfolio · 06-30-2006, 08:43 AM

Thanks Fall_X and thanks everyone, with little modifications, It worked!! now I managed to make a database of hotlinking sites.

Squize · 06-30-2006, 08:51 AM

Perhaps link to this thread in the protection sticky guys ? If it worked, and it's knowledge everyone can use, let's share it

Squize.

Fall_X · 06-30-2006, 09:02 AM

Off course, you might as well turn off hotlinking on the server

Ooh, just thought of another way, if turning off hotlinking is not option : you place your swf in a directory that's not accessible through web browsers, and then make a php script that does the security (checking the referer), sends the right contenttype header, and then opens the swf file and outputs its contents. If the security routines fail, you send another swf displaying a message that users should play it on your site.
No client-side javascript required here, but it is dependant on browsers setting the referer header correctly (so it might be a good idea to allow an empty referer too).

**tonypa** · 07-01-2006, 04:34 AM

Interesting that calling javascript to detect hotlinked swf fails in Flash9 because of security reasons:

A navigate operation attempted to evaluate a scripting pseudo-URL, but the containing document (usually an HTML document in a browser) is from a sandbox to which you do not have access.

You cannot navigate the special windows "_self", "_top", or "_parent" if your SWF file is contained by an HTML page that has set the allowScriptAccess to "none", or to "sameDomain" when the domains of the HTML file and the SWF file do not match.

06-29-2006, 10:17 AM	#1
aqeelsfolio Member Join Date: May 2004 Posts: 58	[RESOLVED] [HELP] Getting hotlinking site URL? Is it somehow possible to get the url of the page that is hotlinking that .swf?? __________________ Quick Flash Games Last edited by aqeelsfolio; 06-30-2006 at 08:44 AM.

06-30-2006, 05:37 AM	#5
tonypa Moderator Join Date: Jul 2001 Location: Estonia Posts: 8,193	Sadly there is no easy and simple way to read url of html page into swf. __________________ My games, Tile based tutorials, Vectors, Latest update - Ununicum

06-30-2006, 07:53 AM	#8
Fall_X crossconscious Join Date: Sep 2005 Location: Belgium Posts: 1,188	Here you go, just tested it and seems to work fine in IE, Opera and Firefox : Code: getURL("javascript:if(top.location!='http://myUrl'){top.location='http://myUrl';}","_top"); Last edited by Fall_X; 06-30-2006 at 08:01 AM.

06-30-2006, 08:43 AM	#9
aqeelsfolio Member Join Date: May 2004 Posts: 58	Thanks Fall_X and thanks everyone, with little modifications, It worked!! now I managed to make a database of hotlinking sites. __________________ Quick Flash Games

06-30-2006, 08:51 AM	#10
Squize Hype over content... Join Date: Apr 2001 Location: Lost forever in a happy crowd... Posts: 5,820	Perhaps link to this thread in the protection sticky guys ? If it worked, and it's knowledge everyone can use, let's share it Squize. __________________ www.gamingyourway.com \| 651:Announce \| Voxel Landscape \| Kaleidoscope \| Tunnel \| Dot vectors \| Plasma

06-29-2006, 03:45 PM	#2
Ray Beez Senior Member Join Date: Jun 2000 Posts: 2,738	Check your server logs. That's one way. You could have some code that silently hits a PHP script on your server, send "URL" to it.

06-30-2006, 05:24 AM	#4
Fall_X crossconscious Join Date: Sep 2005 Location: Belgium Posts: 1,188	This could be bad advice, maybe you can do something a lot simpler, I haven't looked into this much, but you could try getting document.location through javascript interfacing, and then send it to a php script with flash. Just a thought.

06-30-2006, 07:30 AM	#7
Fall_X crossconscious Join Date: Sep 2005 Location: Belgium Posts: 1,188	It might be a bit complicated, and there might be other (better) ways, but you could try something like this. Using getURL you can execute javascript in the user's browser. However, as far as I know, this can not return anything to the swf directly. Thankfully, javascript can also interact with flash (the other way round), as described here : http://www.permadi.com/tutorial/flashjscommand/ Now, you'd need a way to find the swf's name in the browser for this to work, but I can imagine that by looping through all objects and seeing if they have a certain property (using GetVariable), you can find the right object. There may be an easier way too, don't know. After you find the swf, you can send it a variable with the document.location. So to make it all work, your swf should contain a one-line string (with the javascript that finds the swf, gets the location, and sends it to the swf), and pass this string to the browser using getUrl("javascript:"+browserCheckScript); or something like that. Your javascript-string can also just check the document.location, and if it's not the one you intended, you can change it to your site, which should also store the referer in your logs. This way, you won't have to bother finding the swf object with javascript. Note : I have not tried any of this myself, and it's a bit clumsy, but it might work

06-30-2006, 09:02 AM	#11
Fall_X crossconscious Join Date: Sep 2005 Location: Belgium Posts: 1,188	Off course, you might as well turn off hotlinking on the server Ooh, just thought of another way, if turning off hotlinking is not option : you place your swf in a directory that's not accessible through web browsers, and then make a php script that does the security (checking the referer), sends the right contenttype header, and then opens the swf file and outputs its contents. If the security routines fail, you send another swf displaying a message that users should play it on your site. No client-side javascript required here, but it is dependant on browsers setting the referer header correctly (so it might be a good idea to allow an empty referer too).

07-01-2006, 04:34 AM	#12
tonypa Moderator Join Date: Jul 2001 Location: Estonia Posts: 8,193	Interesting that calling javascript to detect hotlinked swf fails in Flash9 because of security reasons: A navigate operation attempted to evaluate a scripting pseudo-URL, but the containing document (usually an HTML document in a browser) is from a sandbox to which you do not have access. You cannot navigate the special windows "_self", "_top", or "_parent" if your SWF file is contained by an HTML page that has set the allowScriptAccess to "none", or to "sameDomain" when the domains of the HTML file and the SWF file do not match. __________________ My games, Tile based tutorials, Vectors, Latest update - Ununicum

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode