Website Security and Mysql database security

[MidwestMale]

Yes i belive thats what they are going to do. since everything is going to be on the database or driven from the database.

Matt.
Midwest Male Ltd
chicago usa
admin@midwestmale.com

If you are using a server side language, you could actually save the images to a SQL server, then create them dynamically along with a timestamp of the creation.

[MidwestMale]

Thanks . We pretty much figured out how we are going to do it and well thanks for all your comments they can close this subject if they want to now or well just keep it rolling for other comments on recommendations for other users incase they have the same situation i have.

Matt
Midwest Male Ltd
Chicago usa
admin@midwestmale.com

and thank you for asking a coherent question, following along with the thread as it grew, and taking what you could out of it. (additional thanks for your continued polite demeanor even in the face of some gruff responses, such as my own)

so many people here will show up, not read anything, ask a nonsensical question, then act all pissed off when people jump on them. you asked something relevant, in the proper forum, and then kept the conversation in the right direction the whole way. (and at the end you even had the class to post a follow-up thank you.)

you're precisely the type of new person i appreciate here on the forums. best of luck with your endeavor.

[d3ad1ysp0rk]

If you are using a server side language, you could actually save the images to a SQL server, then create them dynamically along with a timestamp of the creation.

[Deviant Ollam]

Dear Members, thank you for your input.

and thank you for asking a coherent question, following along with the thread as it grew, and taking what you could out of it. (additional thanks for your continued polite demeanor even in the face of some gruff responses, such as my own)

so many people here will show up, not read anything, ask a nonsensical question, then act all pissed off when people jump on them. you asked something relevant, in the proper forum, and then kept the conversation in the right direction the whole way. (and at the end you even had the class to post a follow-up thank you.)

you're precisely the type of new person i appreciate here on the forums. best of luck with your endeavor.

[MidwestMale]

Dear Members,

thank you for your input.

Matt..

[Asbestos]

Disabling right click won't do anything. You can just enter 'javascript:void(document.oncontextmenu=null)' into the address bar to bypass that in Firefox. Or you can use keyboard shortcuts. I recommend going with astcell's advice. Low res, or images with watermarks. If you really want, you can create tables, and use the image as the background. This will stop the right click -> save as, but looking at the source will make for an easy find.

[MidwestMale]

The platform from the hosting service is

windows with asp and asp.net plus its compadible with php support.

my other host is a unix , with php, perl ,

Well, theres a number of things you can do. With JavaScript you can disable the right-click 'Save this Image as' option. However, that will only stop the weak and the stupid. Using things such as ASP and PHP (not sure what your backend is) you can dynamically create pages and make it much harder for remote browsers to find your images. Also, good file permissions on your image directories is a major issue. A lot of porn sites (nothing derogatory here, but thats what it sounds like you run..and a good chunk of the forum users are large consumsers of said material) dont lock the access to their directories in such a way that only the web server or backend server can access them. Thats how you end up being able to do a "index of" /donkeyfucking in google and find top level directories full of pics for the taking.

The porn sites out there that have 'made it' and are established have become masters in blocking/restricting this sort of thing. If, for example, everyone discovers some new google functionality that lets them see free porn, watch how within a few days half the sites are no longer accessable. I'm sure theres some sort of group/affiliation for Adult Site Webmasters/Architects/Content Builders that covers this kind of stuff, after all its a problem any good porn site faces.

[MidwestMale]

Dear Noid,

yes thanks for your input we do have javascript "right click disabled" on some pages but still you can see the encoding (source) so its not really preventing anything accept stopping someone for like 5 minutes until they figure out how to do it or well even like someone eles said to print screen and copy the photo's to paintshop or some other photo maker and editing the background taking the photo. Yes my site half of it will be FREE and the other half will be PAID Membership so i am just getting some feedback from yall (people who do this stuff for a living getting past things) you can go to any webmaster resource page out there but it comes down to the thing who knows about scripts,backends,codes and everything eles . People who play with websites for a living (yall).

i guess possibly i refrased it wrong in the first post i meant by hotlinking or whatever by grabbing the photo and using it on there website without permission type of thing bandwith is really not a issue its more of a website security feature that does not use java,or other active x bullshit codes to prevent "some" files from being comprimised.

[astcell]

You can keep the photos (that's photos, not photo's) at a very small resolution so that they are not worthy of downloading, you can also put a watermark visibly on the image so that users may not want it (watermarker.com), or you can watermark the image with software and then have the company track then net for unauthorized use of your pictures (site name escapes me).

[noid]

Well, theres a number of things you can do. With JavaScript you can disable the right-click 'Save this Image as' option. However, that will only stop the weak and the stupid. Using things such as ASP and PHP (not sure what your backend is) you can dynamically create pages and make it much harder for remote browsers to find your images. Also, good file permissions on your image directories is a major issue. A lot of porn sites (nothing derogatory here, but thats what it sounds like you run..and a good chunk of the forum users are large consumsers of said material) dont lock the access to their directories in such a way that only the web server or backend server can access them. Thats how you end up being able to do a "index of" /donkeyfucking in google and find top level directories full of pics for the taking.

The porn sites out there that have 'made it' and are established have become masters in blocking/restricting this sort of thing. If, for example, everyone discovers some new google functionality that lets them see free porn, watch how within a few days half the sites are no longer accessable. I'm sure theres some sort of group/affiliation for Adult Site Webmasters/Architects/Content Builders that covers this kind of stuff, after all its a problem any good porn site faces.

Dear Readers,

well thank you for your input . What i was trying to say was since i have a modeling company there will be photo's in (smaller format) but i need it so they cannot copy them since they will be in a photo album format for companys to buy website content. Since the models are under the 2257 regulations under federal law we have to make sure some photo's or videos are protected. i was not stating every single photo or well every single video etc. My site will be a awsome site we will have alot of stuff people can download and do but well there is just some area's that need tighter restrictions is all.

Matt.

Real Models or Porn? Just Wondering..

If you have the photo in a loser-res format there are plenty of things you can do to try to stop the average user from taking those images. However, anyone who is even slightly above average (and the people you try to stop) will easily be able to grab the images.

I however must disagree with Deviant on the hotlinking issue. But not for the same reasons as you. If I post a file on my website, I get pissed when someone hotlinks it and tries to steal my bandwidth. If Bandwidth was free, maybe I wouldn't care, but it's not and I do.

Try looking at this forum and ask them, they will probably be of great help: http://www.webmasterworld.com/forum92/3270.htm

[MidwestMale]

No actually i value your input thats why i asked questions.

Matt...

this may come across as a rather harsh reply, so i apologize in advance for that...

i (and a few others here who i can think of) may not want to help someone with a question like this since "preventing hotlinking of images" is, in the minds of a number of individuals, a stupid thing to try to accomplish. i can elaborate why...

1. it contravenes the basic purpose and premise of the web. files are offered by a web server to whomever makes an appropriate GET request. receipt of files should not depend on other files pulled or referrer data.

2. most of the "blocking" technologies rely on referrer information, which many power users, privacy advocates, etc block in their local proxies. (because of the fact that no web site deserves to know where you were coming from or where you're going next)

3. if you don't want an image to be viewed by anyone and everyone through any means they wish, then maybe it shouldn't be on the web. (this is also a response to the "they're sapping my bandwidth" argument)

4. any solution you employ will be mediocre at best... blocking only some hotlinkers while also confounding a whole array of legitimate users. (the same goes for the "disable right clicking" code... this doesn't block ANYONE who you are trying to stop, it only befuddles and irritates basic users. you think a single person on this forum would allow a remote site to dictate how their browser can operate or what their mouse is allowed to do?)

sorry for the rant... but that's my $0.02. if you still want to pursue this innane venture, Mister Google has what you need.

[MidwestMale]

Dear Readers,

well thank you for your input . What i was trying to say was since i have a modeling company there will be photo's in (smaller format) but i need it so they cannot copy them since they will be in a photo album format for companys to buy website content. Since the models are under the 2257 regulations under federal law we have to make sure some photo's or videos are protected. i was not stating every single photo or well every single video etc. My site will be a awsome site we will have alot of stuff people can download and do but well there is just some area's that need tighter restrictions is all.

Matt.

[astcell]

Kallahar, do you take checks drawn on Nigerian banks?

[kallahar]

I would like to purchase your excellent security services. To allow me to transfer my money to your bank account, please provide your routing number and account number here. They're the numbers at the bottom of your checks. This will allow me to send you money cheaply.

I eagerly await your valued response.