Maverick — Sun, 20 Feb 2000 05:27:00 +0000

Yep, I thought of that, but it presents a problem. If IE isn't sending a valid HTTP_REFERER on right-click file saves, then re-directing anything without that field is asking for trouble. I don't want anybody that's on MY site using IE to get taken to that stolen page when they made a perfectly legit request. I was hoping there was some sort of other way to handle right-clicks. Maybe something with the REQUEST_METHOD or QUERY_STRING or something else that could pick up that the request was coming from a remote location. I just don't understand mod_rewrite well enough to even know if such a thing is possible, let alone how to do it.

roBofh — Sat, 19 Feb 2000 13:35:00 +0000

I'm assuming here that in IE, when you right click and do a 'save as', IE doesn't actually report the referrer to the server since it's only saving the file. The first RewriteCond looks like it allows the no-referrer connections to go through. Perhaps if you try redirecting requests with no referrers to an index page, or even stolen.php3, right-clicking would no longer work. I'll have to fiddle around with apache/netscape/ie here and try it out.