Stopping Remote Linking to uploaded Avtars?

[wstahlhut]

How do I stop people from linking to user uploaded avatars? I would like to even throw an image the reads stolen, I know how to do it for files in a directory using .htaccess, but I do not know for the user uploaded avatars.
Thanks
William

[Erwin]

Xenon posted on how to do this in .htacess - do a search for it.

[WEForums]

<a href="https://vborg.vbsupport.ru/showthread.php?postid=384400#post384400" target="_blank">https://vborg.vbsupport.ru/showt...400#post384400</a>

That's what I found. Check a few posts below that too. I searched since I was interested in it as well...don't think I'll bother now though.

[wstahlhut]

I searched on those and have looked at them, will those listed stop the linking to user uploaded being they are not .gif or jpg, but instead "https://vborg.vbsupport.ru/avatar.php?userid=4422&dateline="?

[wstahlhut]

any other suggestions???

[Erwin]

What's wrong with that code by Xenon? It should work.

[wstahlhut]

correct me if I am wrong but custom avatars and attachments are blobs in the DB, they are not stored on the file system. the .htaccess would only work if the images were on the file system, but how would that work for avatar.php which pulls the blob from the database and renders it.

[Erwin]

It prevents people from linking to the images in the database like this:

<img src="http://www.domain.com/avatar.php?userid=1">

[wstahlhut]

you are 90% correct, but it will not work if you just use the syntax in the above post, I had to add one more set with
"RewriteRule .*\.php$ - [G]" and now it works, I did not know I could stop phps like that.

Live and Learn

Thanks...