Hiding Externals, Furnidata

[Spheral]

Hey, so, i want to stop people ripping my furniture 'cause im in development at the moment, so how do i make it so like Habmoon, the furnidata is internal or something? (basically people cant use it to rip)

[MentaL]

[Dysfunctional]

What do you mean... Mind linking me to HabMoons hotel so I know what you're talking about?

[Spheral]

http://habmoon.org/gamedata/furnidata

[Quackster]

Why don't you ask him yourself? :D

[Spheral]

Why don't you ask him yourself? :D

He wont tell me x]

[Emily]

Use it in a PHP file and do something with IP, use .htaccess to remove the .php and well done.

[FapInc]

John, try put this at the top of the files you wanna hide:


<?php
if(!defined('IN_INDEX')) { die('Sorry, you cannot access this file.'); }


If not work try: without <?php

if(!defined('IN_INDEX')) { die('Sorry, you cannot access this file.'); }

[Spheral]

Might try your ideas out x]

[Disguised]

This might work,
as its on the top of your config, which is also hidden.

so yeah try that

<?php
if(!defined('IN_INDEX')) { die('Sorry, you cannot access this file.'); }


If not work try: without <?php

if(!defined('IN_INDEX')) { die('Sorry, you cannot access this file.'); }

[FapInc]

Take this on the bottom of the page also, ?>

[Disguised]

Take this on the bottom of the page also, ?>

No i dont believe so,
but if it doesnt work, try also adding it at the back of the page.

[FapInc]

You really like wannabeeing Disguised :D

[Disguised]

You really like wannabeeing Disguised :D

What are you talking about?

[Spheral]

Sweet, thanks for all de help :)

Right, i dont get it.

if(!defined('IN_INDEX')) { die('Sorry, you cannot access this file.'); }

i use .txt files for my furnidata and shit?

[Matthew]

I believe Habbo.swf sends a referrer. Make a script to check if your furnidata/texts etc.. is being refereed from Habbo.swf.

[Joopie]

I believe Habbo.swf sends a referrer. Make a script to check if your furnidata/texts etc.. is being refereed from Habbo.swf.

This ^

Or when a user loads up the client page

Set some sessions like

$_SESSION['externals']['furnidata'] = true; 

And on your "furnidata/texts" put:

if (!isset($_SESSION['externals']['furnidata'])) exit; 

And at last.

Rename your file with an php extention. Or tell in the .htaccess to execute a .txt file as php and you're done :)

[Spheral]

I believe Habbo.swf sends a referrer. Make a script to check if your furnidata/texts etc.. is being refereed from Habbo.swf.

Right, i dont understand you.

This ^

Or when a user loads up the client page

Set some sessions like

$_SESSION['externals']['furnidata'] = true; 

And on your "furnidata/texts" put:

if (!isset($_SESSION['externals']['furnidata'])) exit; 

And at last.

Rename your file with an php extention. Or tell in the .htaccess to execute a .txt file as php and you're done :)

Dont work x[

[Disguised]

Sweet, thanks for all de help :)

Right, i dont get it.

if(!defined('IN_INDEX')) { die('Sorry, you cannot access this file.'); }


i use .txt files for my furnidata and shit?

Just add it on top of the text file.

[Spheral]

Just add it on top of the text file.

I did.
im gonna try Matthews SWF furnidata thing x]

[prodigy007]

I just check my cache folder for peoples files. Cant ever hide anything if you can decompile and navigate your own pc.

[seanrom]

    if($_SERVER["HTTP_ACCEPT"] != '*/*') {
        die("U from sulake bro?");
    } 

Add this to the top of the page. It'll block all direct traffic (from a browser) only allowing Habbo.swf to get the vars. At least this is how I do it and none of my users having trouble.

[Spheral]

    if($_SERVER["HTTP_ACCEPT"] != '*/*') {
        die("U from sulake bro?");
    } 

Add this to the top of the page. It'll block all direct traffic (from a browser) only allowing Habbo.swf to get the vars. At least this is how I do it and none of my users having trouble.

Lol, what page?

[iRetro™]

I think its rather obvious that hes made them in PHP, all you do is add include global.php and do a PHP if else statement

UberCMS example;
<?php
if (!LOGGED_IN) {
echo "Fuck off Ripper";
} else
{
echo "Texts Here?";
}
?>

if($_SERVER["HTTP_ACCEPT"] != '*/*') {
die("U from sulake bro?");
}

You serious?

[seanrom]

I think its rather obvious that hes made them in PHP, all you do is add include global.php and do a PHP if else statement

UberCMS example;
<?php
if (!LOGGED_IN) {
echo "Fuck off Ripper";
} else
{
echo "Texts Here?";
}
?>


You serious?

I don't post non-serious things.
Infact I should ask you "Are you serious?" beacuse you clearly diden't understand this question.
He asked for a script that blocked direct access to his external files. Not a script that blocks access for people that are NOT logged in

Spoiler:

Now for the SERIOUS part.
This is what I'm using in my cms

<?php
	if($_SERVER["HTTP_ACCEPT"] != '*/*') {
		ob_start();
			var_dump($_SERVER);
		$server = ob_get_clean();
		$core->ReportError('blockedexternalaccess' . time() . '.txt', $server, 'NOTICE');
		die("U from sulake?");
	}
	$core->require_login();
	define('IGNORE_EXECUTEMSG', true);
	header("Content-Type: text/plain;charset=UTF-8"); 
	echo $core->GetCache('external_variables.txt');
?>

^This is just an example in my own cms with a report if someone gets blocked out/trying to access to directly.

Something like this will probly work for you.

<?php
	if($_SERVER["HTTP_ACCEPT"] != '*/*') {
		die("U from sulake?");
	}
	header("Content-Type: text/plain;charset=UTF-8"); 
	echo file_get_contents('%path_to_your_external_variables%');
?>

[iRetro™]

The fact is, I'm sure the users have to view these things or they won't work :S

So for that I don't believe your script.