vb.org Archive - Board Optimization - Complete Hotlink Protection

Page 1 of 2

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)

- - Board Optimization - Complete Hotlink Protection (https://vborg.vbsupport.ru/showthread.php?t=262655)

naveeid

04-25-2011 10:00 PM

Complete Hotlink Protection

1 Attachment(s)

Title : Complete Hotlink Protection

Version : 1.1

Coder : naveeid
Purpose : Prevent your forum attachments from being directly linked to - prevent bandwidth abuse.

Why : My dedicated server was down due to too many hotlinked image connections. i was feeling helpless. even after protecting images through .htaccess, images were still hot linked through attachment.php

How : just edit your server .htaccess and modify the code with your domain names

Installation :
edit your .htaccess file.

Code:

RewriteEngine on



RewriteCond %{HTTP_REFERER} !^http://(.+\.)?yourfirstwebsite\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?yoursecondwebsite\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*\.(jpe?g|gif|bmp|png)$ http://www.yourfirstwebsite/anypic.jpg [L]





RewriteCond %{HTTP_REFERER} !^http://(.+\.)?yourfirstwebsite\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*attachment\.php*$ http://www.yourfirstwebsite/anypic.jpg [L,R,NC]

1) please change yourfirstwebsite.com and yoursecondwebsite.com to your websites on that cpanel account. if you dont have a second website then you can remove that line

2) i am allowing google to fetch images or attachments for their server. if you dont want to allow google then just remove that line.

3) replace anypic.jpg with your website banner or hotlink warning banner.

it works very fine. its the simplest and easiest available soloution.

Demo:-
i have installed it on my website , you can check my website for hotlink protection.
http://www.nidokidos.org/attachment....3&d=1302073196
now this image will show in my website , this image will be displayed if opened it in a browser. but if it will be opened in any other website , it will be replaced by my website banner.

Boofo

04-26-2011 05:51 AM

Code removed

naveeid

04-26-2011 06:05 AM

well if a server is already overloaded , then it should not allow any directory to be hotlinked.

Boofo

04-26-2011 06:15 AM

You don't have to put anything in to that directory if you don't want to. It just allows you to if ever needed.

And your Google code is redundant as this takes care of it already:

Code:

RewriteCond %{HTTP_REFERER} !^$

naveeid

04-26-2011 09:28 AM

Quote:

Originally Posted by Boofo (Post 2188771)

There is an easier and better way to do this and allow images to be hot-linked from one directory only (for posting error pics and avatars on other sites if they don't allow them locally).

Code:

# allow hotlinking from hotlinking-allowed directory only

RewriteCond %{REQUEST_URI} ^/hotlinking-allowed-directory

RewriteRule ^.*$ - [L]



# Hotlink Protection

RewriteCond %{HTTP_REFERER} !^$

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?yoursite\.com/ [NC]

RewriteRule .*\.(jpe?g|gif|bmp|png|mp3|pdf|psd)$ http://imgxxx.imageshack.us/imgxxx/xxxx/your_hotlink_image_name.jpg [L]

# RewriteRule .*\.(jpe?g|gif|bmp|png|mp3|pdf|psd)$ - [F]

Use either of the last 2 lines depending on what you want.

Boofo is there any solution for hotlinking through attachment.php in these lines?

Boofo

04-26-2011 08:32 PM

Do you allow guests to download attachments?

naveeid

04-27-2011 02:32 AM

well in my forum guests are allowed to download attachments and view attached images.

naveeid

04-27-2011 02:46 AM

through this mod , if any picture will be embedded/hotlinked through attachment.php on any OTHER website , it will display website banner or warning picture instead. similarly any other mp3 or download links of your forum files will be placed on any OTHER website , they will show your website banner or bandwidth theft warning when clicked.

Boofo

04-27-2011 03:00 AM

No problem. I have removed my code.

MissKalunji

05-03-2011 01:17 PM

Where should this go? in forum? or root?

Boofo

05-03-2011 01:19 PM

Root.

MissKalunji

05-03-2011 01:20 PM

and if the image isn't available....

What will it show?

the standard vb error message?

MissKalunji

05-03-2011 01:29 PM

what if my attachement.php

is under a different folder?

billstelling

05-03-2011 07:52 PM

Code:

RewriteEngine on



RewriteCond %{HTTP_REFERER} !^http://(.+\.)?thewindowscenter\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?thewindowscenter\.com/wordpress/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?bing\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*\.(jpe?g|gif|bmp|png)$ http://www.thewindowscenter.com/anypic.jpg [L]





RewriteCond %{HTTP_REFERER} !^http://(.+\.)?thewindowscenter\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?bing\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*attachment\.php*$ http://www.thewindowscenter.com/anypic.jpg [L,R,NC]

is that correct?

opps put the wordpress in the wrong spot.. fixed
RewriteCond %{HTTP_REFERER} !^http://(.+\.)?thewindowscenter.wordpress\.com/ [NC]

Boofo

05-03-2011 08:15 PM

naveeid, your attachment.php line does not work. I set guests to be able to download/view attachments, and this did not stop anyone from another site being able to hotlink it. When I set guests back to not be able to view or download attachments, then they got the login screen on a hotlink. But they got that anyway before the attachment.php line was added to the htaccess. So that code is redundant.

naveeid

05-06-2011 03:14 AM

@boofo
first of all this code is nothing to do with guests. this code is only to stop other sites from hotlinking images from vbulletin forum. as all the images are served through attachment.php in vbulletin , so we need to protect our attachment.php abuse.

if any other website or forum will place any images from my website , for example this image url
http://www.nidokidos.org/attachment....3&d=1304560281

which is serving image through attachment.php , using this code in htaccess will not let the images of your site being displayed on the other website , but it will replace your website banner.

so in a result they will remove your images from their website. the code is working perfectly fine with me.

naveeid

05-06-2011 03:15 AM

Quote:

Originally Posted by MissKalunji (Post 2191332)

what if my attachement.php

is under a different folder?

it does not matter if the attachment.php is under any other folder.. it will work fine.

naveeid

05-06-2011 03:17 AM

Quote:

Originally Posted by MissKalunji (Post 2191328)

and if the image isn't available....

What will it show?

the standard vb error message?

which image you are talking about , please explain your question so that i can give you the right answer.

naveeid

05-06-2011 03:20 AM

Quote:

Originally Posted by billstelling (Post 2191464)

Code:

RewriteEngine on



RewriteCond %{HTTP_REFERER} !^http://(.+\.)?thewindowscenter\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?thewindowscenter\.com/wordpress/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?bing\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*\.(jpe?g|gif|bmp|png)$ http://www.thewindowscenter.com/anypic.jpg [L]





RewriteCond %{HTTP_REFERER} !^http://(.+\.)?thewindowscenter\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?bing\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*attachment\.php*$ http://www.thewindowscenter.com/anypic.jpg [L,R,NC]

is that correct?

opps put the wordpress in the wrong spot.. fixed

Code:

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?thewindowscenter.wordpress\.com/ [NC]

you have not placed any image at anypic.jpg????? please check that.

Boofo

05-06-2011 11:49 AM

Quote:

Originally Posted by naveeid (Post 2192545)

What do you think vb considers someone who isn't logged in, no matter where they are? I'm saying they attachment.php code doesn't need to be there as you have to be logged in to be able to download and see attachments, anyway. Thus, redundant code.

billstelling

05-07-2011 03:25 PM

Quote:

Originally Posted by naveeid (Post 2192549)

you have not placed any image at anypic.jpg????? please check that.

yea i did.. i just named the pic that.. :)

naveeid

05-09-2011 03:21 AM

Quote:

Originally Posted by Boofo (Post 2192648)

if some one is not logging in but visits our website , he is a guest member. you can control guest permissions from the admin panel.

but if some one uses my website resources , hotlink my images in emails , sent it to large yahoo groups , place my website hotlinked images in forums , there is no option in VB4 to control that kind of hotlinking. and there was no modification available to stop the abuse of attachment.php. in this mod you can stop this kind of hotlinking. and save your server resources.

naveeid

05-09-2011 03:22 AM

Quote:

Originally Posted by billstelling (Post 2193024)

yea i did.. i just named the pic that.. :)

so i hope its working fine ?

Boofo

05-09-2011 06:01 AM

Quote:

Originally Posted by naveeid (Post 2193523)

Well, you are wrong. I just tested in on the com with an attachment.php link from my site. If I was logged into my site at the same time, then, yes, the link would show the actual attachment. But if I was logged out of my site and clicked on the link that I posted on the com, it showed the registration error page from my site when I clicked on that link. So, your attachment.php code is ONLY good if the person is also logged into the site they are using it from, or if you allow guests to view and download attachments.

If you have the replacement image for the hotlinking on your site, the resources should be the same on your server as it still has to retrieve the image from your server. ;)

naveeid

06-03-2011 03:52 AM

boofo may be i am unable to explain my point of view correctly to you..

let me explain it again.

1) first of all this mods stops simple hotlinking. and if some one hotlinks your images , it replaces it with your website banner or warning message.

2) secondly if my website images are placed and hotlinked using attachment.php then if will not show the original image but it will show website banner or warning message.

for example this is an image hosted on my website.
http://www.nidokidos.org/attachment....1&d=1298731742

a- if you will try to open it as its , it will be replaced by nidokidos banner.
a- if you will see it in google images , it will work fine.
b- if anyone , guest or member will see this image on nidokidos website pages , it will work fine.
for example see this image posted on this page.
but

if it is hotlinked in "any other" website , it will show a banner or warning message.

now see a website has placed it on it page , (may be using bing) , and as i have not allowed that website or bing to show my image on their web pages , they are getting a banner from my webserver.

please see this link
http://connect.in.com/nidokidos-org/...527553176.html

this is for what i made this mod. i hope you understand it now.
it has nothing to do with registrations , / members / guest.

donal

07-22-2011 12:28 AM

Where this file should actually be placed. Suppose I have www.mysite.com as domain and www.mysite/forum as forum root.

Should I place it in domain or in forum root directory?

naveeid

07-31-2011 05:48 AM

you have to add it in your /forum directory.

Boofo

07-31-2011 05:53 AM

I added it to the root and it works fine from there for me.

naveeid

04-26-2012 04:46 PM

ok good.

viper357

10-23-2012 03:34 PM

Does this work in vb3? I've put this at the bottom of my htaccess file but it doesn't seem to work, can someone check it for me please? My website is in my signature. Thanks.

Code:

RewriteEngine on



RewriteCond %{HTTP_REFERER} !^http://(.+\.)?marineaquariumsa\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?bing\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*\.(jpe?g|gif|bmp|png)$ http://www.marineaquariumsa.com/hotpic.jpg [L]





RewriteCond %{HTTP_REFERER} !^http://(.+\.)?marineaquariumsa\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?bing\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*attachment\.php*$ http://www.marineaquariumsa.com/hotpic.jpg [L,R,NC]

viper357

10-24-2012 03:39 PM

It's blocking images on tapatalk, any idea how we can allow tapatalk?

Ary Braga

12-16-2012 02:39 AM

naveeid and Boofo. I'm from Brazil

My .HTACESS stayed that way

Code:

RewriteCond %{HTTP_REFERER} !^$

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?MYDOMAIN\.com\.br/.*$ [NC]

RewriteRule \.(mid|wav|mp3|zip|avi|rm|ram|swf|mpg|wmv|pdf|jpeg|jpg|gif|bmp|png|psd|ipa|deb)$ http://www.MYDOMAIN.com.br/images/Xto4B.jpg [NC,R,L]

Until herein perfect.

I have a doubt.

The image that will be replaced in the hotlink, should be the same as the image copies from within my domain ?

The image that will be replaced in the hotlink is warped.

Eg: The original image is 200px x 400px.

My hotlink picture. Should measure 200 x 400 too?
Or should lower?

The problem that my images vary in height and width.

Is there any way to set it somewhere or file?

The hotlink img is here:

The test only is here

naveeid

01-08-2013 06:03 AM

Quote:

Originally Posted by Ary Braga (Post 2391005)

naveeid and Boofo. I'm from Brazil

My .HTACESS stayed that way

Code:

RewriteCond %{HTTP_REFERER} !^$

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?MYDOMAIN\.com\.br/.*$ [NC]

RewriteRule \.(mid|wav|mp3|zip|avi|rm|ram|swf|mpg|wmv|pdf|jpeg|jpg|gif|bmp|png|psd|ipa|deb)$ http://www.MYDOMAIN.com.br/images/Xto4B.jpg [NC,R,L]

brother you can not control this. because the image we replace with hotlinked image is different sizes. i think its not important , we can ignore this.

naveeid

01-08-2013 06:04 AM

Quote:

Originally Posted by viper357 (Post 2375342)

Does this work in vb3? I've put this at the bottom of my htaccess file but it doesn't seem to work, can someone check it for me please? My website is in my signature. Thanks.

Code:

RewriteEngine on



RewriteCond %{HTTP_REFERER} !^http://(.+\.)?marineaquariumsa\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?bing\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*\.(jpe?g|gif|bmp|png)$ http://www.marineaquariumsa.com/hotpic.jpg [L]





RewriteCond %{HTTP_REFERER} !^http://(.+\.)?marineaquariumsa\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?bing\.com/ [NC]

RewriteCond %{HTTP_REFERER} !^$

RewriteRule .*attachment\.php*$ http://www.marineaquariumsa.com/hotpic.jpg [L,R,NC]

i cant say anything about vb3 , if the same attachment.php type of thing is there in vb3 , then i think it will work out.

naveeid

01-08-2013 06:06 AM

Quote:

Originally Posted by viper357 (Post 2375663)

It's blocking images on tapatalk, any idea how we can allow tapatalk?

to allow any webiste , just add this code below the google line

RewriteCond %{HTTP_REFERER} !^http://(.+\.)?google\.com/ [NC]
RewriteCond %{HTTP_REFERER} !^http://(.+\.)?YESTOTHISWEBSITE\.com/ [NC]

replace YESTOTHISWEBSITE with the name of the website which you want to allow for hotlink.

MonkYZ

06-19-2013 02:11 PM

What if i have vBSEO installed? Seems like it's not working for me (as it's rewriting the url to make it friendly - therefore it doesn't have the attachment.php inside). Let's do a test:

I will use an IMG for this:

Code:

http://www.consolegames.ro/forum/attachments/f7-console-news/198081d1371497600-cum-se-descurca-last-us-la-capitolul-vanzari-the_last_of_us.jpg?cmps=1

https://vborg.vbsupport.ru/external/...6/1.jpg?cmps=1

See? It's still showing... although i've added the .htaccess lines...

thetechgenius

09-04-2014 08:03 PM

Does anyone have the web.config version of this? I am using iis 7 (windows server 2008R2), and as you know, windows uses web.config, not htaccess.

ozzy47

09-04-2014 11:57 PM

I have seen you ask numerous times about the windows server, is there a particular reason you don't switch to a Linux server?

madness85

09-05-2014 03:07 PM

works great thank you

angeljs

10-16-2014 11:20 AM

Thanks so much for this, just what I needed. I uploaded it to my forum directory as it wouldn't work in the root.

All times are GMT. The time now is 06:16 PM.

Page 1 of 2

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01597 seconds Memory Usage 1,851KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (11)bbcode_code_printable (12)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (1)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (40)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: