Picture Security

PHP programming forum. Ask questions or help people concerning PHP code. Don't understand a function? Need help implementing a class? Don't understand a class? Here is where to ask. Remember to do your homework!

Moderator: General Moderators

Post Reply
User avatar
tecktalkcm0391
DevNet Resident
Posts: 1030
Joined: Fri May 26, 2006 9:25 am
Location: Florida

Picture Security

Post by tecktalkcm0391 »

I was thinking about a way to make pictures "secure" in the fact that they won't be allowed to be downloaded. If you used a combination of socket_get_status() and headers() with the included pictures, you could make a file that gets the URL of the request. If its on the site allow it if not don't include it (disable hotlinking). Store all of the files in a non-internet folder. Use socket_get_status() to see if a download is going thought and if so stop it.

Would that all work or no?
User avatar
Burrito
Spockulator
Posts: 4715
Joined: Wed Feb 04, 2004 8:15 pm
Location: Eden, Utah

Post by Burrito »

the problem is when someone visits the site, they download the image...then it's on their machine and they can do whatever they want with it.
User avatar
tecktalkcm0391
DevNet Resident
Posts: 1030
Joined: Fri May 26, 2006 9:25 am
Location: Florida

Post by tecktalkcm0391 »

how do they download the image if you set it the image to no-cache.
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Post by Benjamin »

If they can view it in a browser, they can copy it. Even if you disable right click or put a clear gif over it they can just take a screen shot. Best you can do is disable hotlinking and watermark the image.
User avatar
tecktalkcm0391
DevNet Resident
Posts: 1030
Joined: Fri May 26, 2006 9:25 am
Location: Florida

Post by tecktalkcm0391 »

I think I found a way to disable a screenshot also.... I'll work on something and let you guys know. ANY HELP OR IDEAS WOULD BE GREATLY APRECIATED.
User avatar
Burrito
Spockulator
Posts: 4715
Joined: Wed Feb 04, 2004 8:15 pm
Location: Eden, Utah

Post by Burrito »

tecktalkcm0391 wrote:how do they download the image if you set it the image to no-cache.
sorry I wasn't more clear...

let's say I go to a site and see a picture that I like, I can either:

1) use snagit or some similar program and just save it to my machine or
2) take a screenshot and save it to my machine

in either case, once I hit the site, and am viewing the image, it's on my machine

edit: wow! two posts while I went to go and brush my teeth :P

you get the idea though.
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Post by Benjamin »

tecktalkcm0391 wrote:I think I found a way to disable a screenshot also....
I am sure that is not possible.
User avatar
Burrito
Spockulator
Posts: 4715
Joined: Wed Feb 04, 2004 8:15 pm
Location: Eden, Utah

Post by Burrito »

I can guarantee it's not possible with programs like snagit...
User avatar
tecktalkcm0391
DevNet Resident
Posts: 1030
Joined: Fri May 26, 2006 9:25 am
Location: Florida

Post by tecktalkcm0391 »

Well right now I am looking at: http://www.htmlblock.co.uk/ and there program that works with blocking screenshots, but I haven't tried it against other programs, I am going to go try snagit now... bbl
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Post by Benjamin »

Getting around all of their *Security Features* is trivial..
Disabling the print screen key stops the user from taking a quick screen shot of your site for their personal use.
Q. What if the browser doesn't have focus?
A. The print screen key event isn't blocked.
User avatar
tecktalkcm0391
DevNet Resident
Posts: 1030
Joined: Fri May 26, 2006 9:25 am
Location: Florida

Post by tecktalkcm0391 »

http://www.artistscope.com/copysafe/demos.html <--- You have to download a plugin, but it will block everything that trys to take a screenshot.
User avatar
Weirdan
Moderator
Posts: 5978
Joined: Mon Nov 03, 2003 6:13 pm
Location: Odessa, Ukraine

Post by Weirdan »

Plugin? Why would I download and install something that deliberately limits what I can do to a data on my computer?
User avatar
Benjamin
Site Administrator
Posts: 6935
Joined: Sun May 19, 2002 10:24 pm

Post by Benjamin »

Weirdan wrote:Plugin? Why would I download and install something that deliberately limits what I can do to a data on my computer?
I think you can't even see the image without the plugin, but even then, asking your visitors to install a plugin to view pictures is crazy (imo)..

Pushing that aside though, I'm pretty confident I could still get a screen shot.
User avatar
Chris Corbyn
Breakbeat Nuttzer
Posts: 13098
Joined: Wed Mar 24, 2004 7:57 am
Location: Melbourne, Australia

Post by Chris Corbyn »

At the end of the day if you don't want to run the risk of having images downloaded then don't make them available (publically) over HTTP. You can deter people from downloading by watermarking them.
Post Reply