tolong bantu saya untuk mengendalikan IDM agar terblokir dari website saya
Please ask the question in English!
4 Likes
I’m sorry, but what is this “IDM” thing you’re talking about? And why and how is it supposed to be blocked?
5 Likes
I ask for help to block IDM poups that appear on sata website and block IDM from being able to write their id on my website
Hi 7Elohim,
Assuming you’re talking about this IDM
The best practise is to issue a download token whenever you want to give out a file and set an expiry on that. While you have no control over how long the download takes place due to slow internet somewhere, you can still verify the token on first hit and then allow that IP to get the file for 24 hours.
If you mean users keeps seeing these popups without you putting them there in the first place, that’s very likely on the users’ end having the application installed in the first place. There’s nothing you can do to control that.
Sounds more like a security issue to me by allowing them writing to your website in the first place, if that’s what you actually mean.
Cheers!
6 Likes
@7Elohim I think you’ve made a mistake about the question you were meant to ask. IDM (Internet Download Manager) is a tool where users can download files from a website. IDM can’t perform anything other than that.
2 Likes
Hi @7Elohim,
Do you mean you would like to prevent people from downloading stuff using IDM on your website or are you having another issue with the website?
Cheers!
5 Likes
ok
yes
What do you mean by ok?
4 Likes
yes, I think there is no way to overcome IDM appearing on my html page
If you have a solution, maybe it can help me
Be clear and he may be able to give you solution.
5 Likes
Hi 7Elohim,
Please identify which case are you in clearly in order for us to help you:
Cheers!
6 Likes
Sounds more like a security concern to me by allowing them to write to your website in the first place, if that’s what you actually mean…
Yes this is what I mean, to prohibit them from downloading videos or photos on my HTML page by using 3rd party apps
I’m sorry but there is no way to prevent people from downloading media from your website. No matter how much effort you put into it without breaking your website, people will still find a way to bypass it.
If you don’t want it to happen then don’t make it public at first place.
8 Likes
Hi 7Elohim,
Anything you present using a website has to be sent to the visitor’s machine for viewing, fundamentally speaking of you wish not to share the file, do not host it publically. Alternatively if it’s about copyright, put it behind a paywall or add watermarks would be sufficient.
Cheers!
6 Likes
Hey there, As a cybersecurity pentester, I can tell you that it’s not a security issue. No one is editing or writing anything to your HTML content. IDM is intercepting the user’s browser only if the user’s installed it on the browser. To be clear, look at the below image.
See, even the IDM extension popup is appearing on Youtube. You can’t do anything about it, buddy.
4 Likes
Hi Herbert,
This is the part that I’m referencing. To my perception, this means that somehow something can do writing on his website on the server side, which is a security issue. However simply adding HTML elements is debatable.
In IDM’s case, as I do not use IDM, I’m not sure how they add the display to the page, most download software that does this is achieved by installing some sort of plugin to the browser that adds such display element, whether via HTML or render view is up to the chosen application.
Cheers!
2 Likes
Hi 7Elohim,
There’s a way you can consider implementing but at a very high effort cost, and that does not prevent download fundamentally but blocks most non-tech savvy users (those who probably require IDM in the first place).
You can search “HLS media encryption online streaming” to know more about the methodology.
Simply put, it chops the video into a ton of small chunks, each encrypted. Then a .m3u8 list indexes all the links and keys to the chunks, and then allows a javascript-powered video player to download parts of the file and play it. You can then authenticate users against the small .m3u8 file.
Please do note that this method requires some coding on your end, and does not prevent screen recorders, physical cameras, or tech-savvy people that go to lengths to download the m3u8 file and spend the effort to encode the file back into its original form.
If you need to properly protect the content, get users to pay you before letting them view it. Whether users pay you is a matter of content quality and marketing via the preview. Most streaming services also use this technology but they still cannot combat piracy for the same screen recording reason.
Cheers!
8 Likes