I stored important images outsite of "www" folder, so even they know the path, they just can't link to it.
http://dactrung.net/NHAC/khungnhac.asp?id=1148
<% strReferer = lcase(Request.ServerVariables("HTTP_REFERER"))
if instr(strReferer, lcase("yourdomain"))>0 OR instr(strReferer, lcase("your.website.ip"))>0 then
If Request.QueryString("scr") <> "" then
ten = Request.QueryString("scr")
Else
ten = "leech.gif"
End If
end if
FilePath = "E:\your\physical\path\" & ten
Set adoStream = Server.CreateObject("ADODB.Stream")
adoStream.Open()
adoStream.Type = 1
adoStream.LoadFromFile(FilePath)
Response.BinaryWrite adoStream.Read()
adoStream.Close: Set adoStream = Nothing
Response.End
%>