Anti Hotlinking

[Mr Spock]

To stop hotlinking put the follwong code in my htaccess ,

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^http://(www\.)?fotopiccanti.it [NC]
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} ^http://.*$
RewriteRule \.(jpe?g|gif|bmp|png)$ - [F]


What it ended up doing was block all images on my server , so if I made a freesite - the images that I hosted on my server would not appear, any idea why?

[dunc]

I'm not an expert in these matters - but I did have a similar problem a few years ago and used the code below... but if I remember when researching - it was a different syntax dependent upon the server setup:

RewriteEngine On
RewriteCond %{HTTP_REFERER} ^http://(.+\.)?altlab\.com/ [NC]
RewriteRule .*\.(jpe?g|gif|bmp|png)$ nohotlink.gif [L]

[pc]

what I have in my site:


## DISABLE HOTLINKING
RewriteEngine on
# Options +FollowSymlinks
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?aaaaa.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://(www\.)?bbbbbbb.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://(www\.)?cccccccc.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://(www\.)?ddddddd.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://(www\.)?eeeeee.net/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://(www\.)?fffffff.com/.*$ [NC]
RewriteRule \.(gif|jpg|jpeg|png|js|css)$ - [F]


a,b,c,d,e,anf are exceptions

[pc]

And there is more here

[cd34]

Originally Posted by Mr Spock

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^http://(www\.)?fotopiccanti.it [NC]
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} ^http://.*$
RewriteRule \.(jpe?g|gif|bmp|png)$ - [F]

The problem here is that:

RewriteCond %{HTTP_REFERER} ^http://.*$

matches any request that has a referrer. So, if the referrer is not from your site, and it is not blank, and it comes from any site, block the image.

Removing that one line will fix the problem.

[Mr Spock]

I tried that and still blocks my images - I only want to stop fotopicanti from linking to pics , but it seems like any requests get blocked

Should save on bandwidth though

[cd34]

That rule is only allowing fotopiccanti.it to link your images, so, its the reverse of what you want.

There are two ways to do it.

1) block all hotlinking allowing your domain

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?yourdomain.com/.*$ [NC]
RewriteRule \.(jpe?g|gif|bmp|png)$ - [F]

2) deny specific sites from hotlinking

RewriteEngine on
RewriteCond %{HTTP_REFERER} fotopiccanti.it [NC]
RewriteRule .* - [F]

A better rule that is likely to catch a few potential ways that they can potentially work around your rules is:

RewriteEngine on
# leave this line in allow empty referrers, remove to disallow empty referrers
RewriteCond %{HTTP_REFERER} !^$ [NC]
RewriteCond %{HTTP_REFERER} !^http://(.*@)?([a-z0-9-]+\.)*yourdomain\.com(:[0-9]+)?(/.*)?$ [NC]
RewriteRule .*\.(asf|mpg|mpeg|wmv|avi|rm|gif|jpe?g|png|zip)$ - [NC,F,L]