JS破解防盗链

今天翻看群聊天信息的时候,看到了ASP快剑手站群 兄弟的JS破解防盗链,用的是QQ空间的例子,试了一下确实很牛逼,经测试新浪微博一样试用.

大概的思路是用iframe绕过refer的检测吧,refer为空就OK了?? 下面贴上代码

<script type="text/javascript"> 
function showImg( url ) { 
var frameid = 'frameimg' + Math.random(); 
window.img = '<img id="img" src=\''+url+'?'+Math.random()+'\' /><script>window.onload = function() { parent.document.getElementById(\''+frameid+'\').height = document.getElementById(\'img\').height+\'px\'; }<'+'/script>'; 
document.write('<iframe id="'+frameid+'" src="javascript:parent.img;" frameBorder="0" scrolling="no" width="100%"></iframe>'); 
} 
</script> 
<h1>直接盗链：</h1><br> 
<img src="http://a1.qpic.cn/psb?/cab4c68b-3fcc-45a4-8321-4bfe7cceabc3/swMpM1iFZdr*YoMt66W7JCfqRqtiOiT58Aj4Cq5N.FM!/c/dG*Rxp9vFAAA&bo=WAIgAwAAAAABAF4!" /><br> 
<h1>js破解盗链：</h1><br> 
<div id="hotlinking"><script type="text/javascript">showImg('http://a1.qpic.cn/psb?/cab4c68b-3fcc-45a4-8321-4bfe7cceabc3/swMpM1iFZdr*YoMt66W7JCfqRqtiOiT58Aj4Cq5N.FM!/c/dG*Rxp9vFAAA&bo=WAIgAwAAAAABAF4!');</script></div>