Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "Mel Smith" <syntel@cox.net>
Newsgroups: comp.lang.javascript
Subject: Re: onclick and <a> tag question
Date: Thu, 19 Mar 2015 16:34:16 -0700
Lines: 37
Message-ID: <cn14nuF582uU1@mid.individual.net>
References: <cmugv0Fep3qU1@mid.individual.net> <2047696.ZRK4UxyjuH@PointedEars.de> <cn09pjFsj2vU1@mid.individual.net> <mef12f$1g8$1@solani.org> <cn0mc3F1gufU1@mid.individual.net> <mefbih$8re$1@solani.org>
X-Trace: individual.net E5Cz5wcREYde/xopURgo9Q5Eecj+tiW3cOx7u/s6XZ0OogYyZt
Cancel-Lock: sha1:AH4z7MTMZ+c3EsSOJuY8rzLHveY=
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5931
X-RFC2646: Format=Flowed; Original
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157
Xref: csiph.com comp.lang.javascript:27087

Christoph said:

">> But it still bugs me !
>
> If you really want to prohibit the usage of download managers, you
> should do this server side.  So don't give a direct download link to the
> file resource, but instead to a script that will pass the file contents
> through.  Signal the client that range requests are not supported by
> sending Accept-Ranges: none, and respond with an appropriate 4xx status
> code, if a Range header field is contained in the request.
>
> However, this would be OT for this newsgroup, if you won't use a server
> side ECMAScript implementation to do it.

Thanks -- I'll consider it.

    But, I'm still in the punishment phase -- i.e., I'm angry and don't want 
to play 'nice' anymore.

    I placed a new 'build' on my site this morning, and let my group know of 
its existence on our ng.

    Just a few minutes ago, I had the first 'sniff' by an abuser where he 
was (apparently) setting up for an attack tonite maybe, and where I 
substituted an 'O' in place of a '0' in the 'files' sub-dir, and of course, 
he got my  '404' response.  He's probably a bit confused now -- I hope. But, 
he'll see I tried to 'spoof' him, and he'll take action again tonite. If he 
had 'clicked'on the download, it would have worked correctly

    But soon (in a week or so), I'll be ready. Then *all* downloads will 
requirea 'click' to get them going not just 'Gets' by CURL .

-Mel

-Mel