.htaccess and hotlinking problem

jek

Hi there!

I have a little problem with my .htaccess file...

Here's my .htaccess file:

RewriteEngine on
RewriteRule ^/images/allowed/(.+) - [PT,L]
RewriteCond %{HTTP_REFERER} !^[url]http://www\.mysite\.com.*[/url]$ [NC]
RewriteCond %{HTTP_REFERER} !^[url]http://mysite\.com.*[/url]$ [NC]
RewriteCond %{HTTP_REFERER} !^[url]http://forum\.mysite\.com.*[/url][/url]$ [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp|mp3|pdf)$ [url]http://www.mysite.com/images/hotlink.jpg[/url] [R,NC]

So, I want to block hotlinking from every host exept: www.mysite.com, mysite.com and forum.mysite.com.

This works like a charm... However, I want other sites to be able to hotlink the images in /images/allowed and this doesn't work...

Also, I want the image 'hotlink.jpg' to appear when someone tries to hotlink an image, this doesn't work either...

Thanks in advance / jek

tsinka

Hi,

this worked for me:

RewriteEngine on
RewriteRule ^{/allowed/(.+)} - [PT,L]
RewriteCond %{HTTP_REFERER} !^{[url]http://localhost.[/url]$} [NC]
RewriteRule ..(jpg|jpeg|gif|png|bmp|mp3|pdf)$ http://localhost/allowed/apache_pb.gif [R,NC]

The problem is that if you redirect to
http://www.mysite.com/images/hotlink.jpg [R,NC]
the referer still doesn't point to your site so this will again block. If you redirect to allowed/someimage.jpg then it should work.

In my case apache blocked every request to an image not being in allowed and redirected to /allowed/apache_pb.gif. Every direct request to an image in allowed works perfectly.

jek

I've edited my .htaccess to look like this:

RewriteEngine on
RewriteRule ^/hotlink_allowed/(.+) - [PT,L]
RewriteCond %{HTTP_REFERER} !^http://www\.mysite\.com.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://mysite\.com.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://forum\.mysite\.com.*[/url]$ [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp|mp3|pdf)$ http://www.mysite.com/hotlink_allowed/hotlink.jpg [R,NC]

But I still cant get the the images in /hotlink_allowed/ to be shown on direct requests from other sites... This also goes for 'hotlink.jpg' in /hotlink_allowed/...

The directory 'hotlink_allowed' is placed right under 'public_html', is that correct?

Any ideas?

tsinka

Hi,

can you post your httpd.conf ? Maybe I can see what's wrong. the hotlink_allowed has to be in the DocumentRoot of the VirtualHost or if you do not use VirtualHost in the DocumentRoot configured in the global context of the httpd.conf.

Do you use mod_userdir (because you mentioned public_html) ? Then the Rules might have to be rewritten 🙂

jek

Um... I can't find any 'httpd.conf' file...

I didn't mention that my site resides on a webhotel...