Hi, I don't know if this is a drupal issue, so I apologize if this request is made in the wrong place.I have my website, www.example.com. I create a subdomain and it is properly running, with help of domain module. http://subdomain.example.com
this subdomain is a service for a customer that has his own website, not with drupal, but wants a particular service and I make it for him. He wants that: http://subdomain.example.com is accessible only from its link in his homepage, not from external user. In a few words, the subdomain should work only if the visit comes from his website. Do you think that a similar thing have sense? I still didn't give any answer about it, because it appears to me a strange request and I don't know how to realize it.
What do you think about it?
ps: I really thank this group because every time I made a question I always had a good feedback, sometime I forgot to thank people.
On Sun, Feb 28, 2010 at 4:19 PM, Simone Dal Maso simone.dalmaso@juvox.itwrote:
Hi, I don't know if this is a drupal issue, so I apologize if this request is made in the wrong place.I have my website, www.example.com. I create a subdomain and it is properly running, with help of domain module. http://subdomain.example.com
this subdomain is a service for a customer that has his own website, not with drupal, but wants a particular service and I make it for him. He wants that: http://subdomain.example.com is accessible only from its link in his homepage, not from external user. In a few words, the subdomain should work only if the visit comes from his website. Do you think that a similar thing have sense? I still didn't give any answer about it, because it appears to me a strange request and I don't know how to realize it.
What do you think about it?
ps: I really thank this group because every time I made a question I always had a good feedback, sometime I forgot to thank people.
-- [ Drupal support list | http://lists.drupal.org/ ]
This doesn't seem to me a drupal issue. I don't if some module is there to check referring website, but you can use this in the htaccess -
RewriteCond %{HTTP_REFERER} !=http://customerwebsite.com RewriteRule (.*) runawaypage.html [R=301]
THIS SHOULD COME BEFORE DRUPAL REWRITE RULES OTHERWISE IT WILL NOT WORK.
Why not just set a cookie on example.com (make sure the cookie domain is .example.com so it can be read on subdomains). Don't set the expire date so it deletes when the browser is closed. Now on subdomain.example.com, check for that cookie. If it doesn't exist they are redirected to example.com.
You could also try using HTTP_REFERRER on the subdomain site, and if it doesn't equal *example.com then it redirects to the top site. I would advise against that though since a lot of internet security suites alter and/or strip out the referral header and they will never be able to access it.
A final option, if you aren't using any advanced page caching on the top site (such as Boost). Check for the session cookie in the subdomain site. To do this you would have to set the $cookie_domain in settings.php on the top site to .example.com, and then copy that variable over to your subdomain.example.com. Now just look for $_COOKIE[md5($cookie_domain)]. If example.com is on SSL then you will need to append SSL to the end of $cookie_domain on the subdomain site only (it does it automatically in Drupal).
Jamie Holly http://www.intoxination.net http://www.hollyit.net
On 2/28/2010 5:49 AM, Simone Dal Maso wrote:
Hi, I don't know if this is a drupal issue, so I apologize if this request is made in the wrong place.I have my website, www.example.com. I create a subdomain and it is properly running, with help of domain module. http://subdomain.example.com
this subdomain is a service for a customer that has his own website, not with drupal, but wants a particular service and I make it for him. He wants that: http://subdomain.example.com is accessible only from its link in his homepage, not from external user. In a few words, the subdomain should work only if the visit comes from his website. Do you think that a similar thing have sense? I still didn't give any answer about it, because it appears to me a strange request and I don't know how to realize it.
What do you think about it?
ps: I really thank this group because every time I made a question I always had a good feedback, sometime I forgot to thank people.
-
Jamie Holly -
Nilesh Govindarajan -
Simone Dal Maso