protecting images with asp

[Roland Hall]

I read Aaron's article: http://www.aspfaq.com/show.asp?id=2276 re:
protecting images from linked to by other sites. There is a link at the
bottom of that page that references an interesting article about ways of
protecting your images from being downloaded. It was my understanding that
if the client sees it, then it's in the client cache. Am I wrong in this
belief or not?

I took the information in the article and created the .asp that renders one
image vs another depending on the HTTP_REFERER. I also added the no-right
click and turned off the image gallery with the META tag and I put a
transparent gif image over the other image that is inside a span and set to
the background.

One thing I found, which was not mentioned, was that I was able to put the
..asp file loading in the .css file with:
background: url(/images/filename.asp)

I didn't see any references to doing it that particular way. However, I
would like to see if anyone can get past these settings and actually obtain
the image and in what way can it still be done. I would think you could
just pull it out of your browser cache if you really wanted it.

http://kiddanger.com/images/badtest.asp

Another interesting side-effect is that one you track down the .asp file and
try to load it directly, it shows the other image but it also disables
viewing the source from either right-click or from the pull-down menu and if
you then click your back button on your browser, the image size of the
original image is there but it is populated with multiple instances of the
alternate image. Then if you click the refresh button on the toolbar, the
original image returns.

I don't have any other browsers installed. I'm using
IE6.0.2800.1106 .xpsp2.030422-1633. I'm wondering what the effects are with
others. I would appreciate feedback from those of you who do have other
browsers installed.

--
Roland

This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability o
r fitness for a particular purpose.
-Technet Knowledge Base-
http://support.microsoft.com/default...&ln=EN-US&FR=0
-Technet Script Center-
http://www.microsoft.com/technet/tre...er/default.asp
-WSH 5.6 documentation download-
http://www.microsoft.com/downloads/d...displaylang=en
-MSDN Library-
http://msdn.microsoft.com/library/default.asp

[Ray at]

"Roland Hall" <nobody@nowhere > wrote in message
news:OM******** ******@tk2msftn gp13.phx.gbl...

What I meant, although I worded it poorly, was to prevent people from
linking from other sites, displaying the image on their web site and eating up my bandwidth but again, I don't have any images I'm worried about.

I thought you said you were talking about the stuff at the bottom of the
article with people saving your images, not the hotlinking thing.

Ray at work

[Aaron Bertrand - MVP]

> I thought you said you were talking about the stuff at the bottom of the

article with people saving your images, not the hotlinking thing.

In the past 24 hours it seems Roland has been 99% hot air, 1% substance.
I'm sure it'll balance itself out over time.

--
Aaron Bertrand
SQL Server MVP
http://www.aspfaq.com/

[Brian Staff]

In IE go to Tools; Internet Options; General TAB; Settings button; View Files
button. If you can see it, then it is on the client machine and in the client
cache.

Brian