Protecting Your Web Pages

IkY0294

HD Addicted
Hey, Ever had someone RIP your site template or theme or images?

I think I have a little solution for that or lets say a little thing that can stop them from doing it, Im not saying it can completly stop them but make them do extra work on it or they don't know a way around it.

Heres The Problem:

People or kids going around taking templates off the web right off your web site without know any password to cpanel or a control panel!

Heres What You Can To Do Stop It or Try To.

1. Put a blank index.html file in your images folder and style also js folders, Any folders that people don't need to go into that is just used to store or keep sertant images or scripts in like a addon more like.

What this will do is make it so that then the images folder or what ever folder you put the blank html file in will show just a while page and not all the files that are in that directory.


How Dose That Stop People?

In stead of them clicking ever file image and saving it they'll need to find the url of the image and type it in the url box on there browser then save it. Try it your sefl on your own site and you'll see what I mean.


I also forgot to add if your wondering if they just get all the images all they do is right click on the index.html of your main page or like the about.html page and click view source and copy that big code save it as a what ever type of name page they want and tere they go they have your template..

Im trying to figure a way on how to stop people from do this threw the view source like maybe if you write your pages in php it could stop them andputting blan index.html pages in your folders tat arent needed.
 
Index Manager - located bottom of cPanel can be used on all folders (usually common folders) for a similar effect (by selecting no indexing) which will show a 403 forbidden error.

Which with a little modification to the error pages could be shown as a 404 page not found ;)

though that said if somone has access to the direct path to an image or file it is easily stolen.
 
You can also right click and save an image on the design from the front page...Image folder just makes it easier; also helps them get images that are too small or unable to save as.
 
You cant right click images that are put on the site threw css..

This may be so however anyone who is able to view source can simple navigate to the CSS file that contains the CSS style sheets for your site and then systematically navigate to each image directly for example in CSS you may have /mysite/logo/log.jpg, all such a person need do is point their browser at www.yoursite.com/mysite/logo/logo.jpg and they will be presented with the image or a download (similarly for JS, CSS and other non server side code)

As such the only method really by which this could be prevented is through the encoding of webpages however many of the keys used are public and are able to be cracked however more simply regardless of any method a full webpage and its dependant files will be present in the users .tmp folder for their appropriate browser (decoded if it where encoded).

Security and more specific phishing is a very big issue as almost anyone can copy a webpage and or identity due to the openness of the web, though function cannot be stolen (server side scripts such as ASP.net, PHP, PERL, CGI) as such actively searching and following tip offs from users or similar is advisable.

Advising users to only enter their details under certain criteria and make that known to them for example “we do not request passwords in whole or part” “we will never request card details” “only enter your login at secure.mysite.com when you see the padlock or green bar in your browser”.

eBay and PayPal have made very public and very similar schemes to ensure users don’t fall fowl of those who wish to phish or use even the legitimate site in the case of eBay to scam users, and I can’t say that everyone even those in web design, computing or hosting get out unscathed. As such I can admit the loss of £1,500 on eBay and know of much larger losses from those who run their businesses there.

Make phishing and other threats a concern and try to inform users, it sets in much more when your bitten by the thing you are fighting against and as such advertising in a sense the dangers and solutions to those is advisable thankfully eBay and PayPal as well as Amazon, Play and others have done this successfully so look to those as a few live examples.
 
There is definitely little that can be done about ripping of sites and images. I can tell you I know how to do that to almost any webpage/forum. Its how I learned how HTML/CSS integrates on some sites. Open the source, play around with it, move on. You can make it harder, but where there is a will there is a way.

The average hacker/ripper keeps the code and screws things up instead. Your best bet is to watermark images, embed copyrights in coding and systematically track down anything suspicious.
 
Yeah unfortunately there is little you can do however, it's definitely wise to not make it easy. Also, I've seen some webmasters who disabled right click to prevent people from viewing the source which was rather weak as any savvy ripper would simply use the keyboard shortcut to view the source or even disable javascript and steal the code anyway so don't waste your time doing that as it might annoy legitimate users instead!
 
Protecting your web pages are very important. Wihout some protection, it would lead your web page to a complete disaster like hacking issues, etc.
 
While I think protecting your site is important, I also think protecting your entire hosting environment is equally or moreso important.
 
Index Manager - located bottom of cPanel can be used on all folders (usually common folders) for a similar effect (by selecting no indexing) which will show a 403 forbidden error.

Which with a little modification to the error pages could be shown as a 404 page not found ;)

though that said if somone has access to the direct path to an image or file it is easily stolen.

I should probably know how to do this but I do not. I was wondering if you would care to tell a few details on how you would go about editing the error page to show the 404 not found? Would greatly appreciate it!
 
Ok as I presume you are using cPanel, scroll to the “advanced” group box at the bottom of the page (x3 theme) to the right of “index manager” will be “error pages” if you click on this a new page will load allowing you to edit your error pages and a common selection will be shown.

Click on which error page you would like to edit and begin to enter your code, pressing save located at the bottom of the page when finished. A standard 403 Forbidden page is as below, and as such simply change this to a 404 page not found.

where I have added <requested url in menu> simply use the button provided in the cpanel window to insert the requested url

403 forbidden

Code:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access [COLOR="green"]<requested url in menu>[/COLOR] 
on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
<hr>
<address>Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at www.csn-uk.net Port 80</address>
</body></html>


404 Not Found

Code:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested [COLOR="Green"]<requested url in the menu>[/COLOR] was not found on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
<hr>
<address>Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at www.csn-uk.net Port 80</address>
</body></html>
 
Back
Top