Hotlink Protection Tutorial (Apache Server - .htaccess files)

[NeutralizeR]

Originally Posted by attroll

My domain is setup so that it works with and without the "www". How can I set it up to with with and without the "www"?

I suggest you to use only one version of your domain with 301 redirect. That way it won't act like two different web sites (bandwidth issue) and hotlink protection'll perfectly work.

[attroll]

Originally Posted by NeutralizeR

I suggest you to use only one version of your domain with 301 redirect. That way it won't act like two different web sites (bandwidth issue) and hotlink protection'll perfectly work.

I just thought there would be a way to set it up for both in the .htaccess file.

Which would you prefer then, to use "www" and set the 301 redirect for the name witho out hte "www"?

How would I setup a 301 redirect for the one I am not going to use?

[NeutralizeR]

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://www.mysite.com/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^http://www.mysite.com$      [NC]
RewriteCond %{HTTP_REFERER} !^http://mysite.com/.*$      [NC]
RewriteCond %{HTTP_REFERER} !^http://mysite.com$      [NC]
RewriteCond %{HTTP_REFERER} !^$
RewriteRule .*\.(jpg|jpeg|gif|png|bmp|swf|mp3|mpeg|mpg|ram|rm|wma|wav|asx|wmv|avi|mov|zip|rar|exe)$ http://www.mysite.com [NC,R,L]

Try the one above or this one as the domain line:

 RewriteCond %{HTTP_REFERER} !^http://.*mysite\.com.*$ [NC]

[chapsrulez]

Neutralizer.

thanks for the support.

In my vbulletin configuration i have setup that guests are allowed to vew attachments and i want to keep it that way, and my question is how should i configure the rewrite rule to only limit the access to attachment.php

First i tried with:

PHP Code:

RewriteRule .*\.(php)$ http://www.myserver.com/img/forbid.jpe [R,NC] 


But obviously it locks all the function in vbulletin (login.php, register.php, etc)

Then i tried with:

PHP Code:

RewriteRule attachment.php$ http://www.myserver.com/img/forbid.jpe [R,NC]
RewriteRule .attachment\.(php)$ http://www.myserver.com/img/forbid.jpe [R,NC]
RewriteRule .attach*\.(php)$ http://www.arquinauta.com/img/forbid.jpe [R,NC] 


but none of them seem to work...
thanks again.

[final kaoss]

Thanks but I found a better way to prevent hotlinking. From here.
http://perishablepress.com/creating-...king-strategy/

###############################
# ultimate hotlink protection #
###############################

# disable directory browsing
# uncomment this option to protect access to directories
# Options -Indexes

# enable the following of symlinks
# uncomment this option if hotlink protection fails to work
# Options +FollowSymLinks

# verify presence of mod rewrite
<IfModule mod_rewrite.c>

 # enable the rewrite engine
 RewriteEngine on

 # check that file exists
 RewriteCond %{REQUEST_FILENAME} -f

 # check for requested file types
 # include additional file types here
 RewriteCond %{REQUEST_FILENAME} \.(gif|jpe?g?|png)$                [NC]

 # allow blank referrer requests
 RewriteCond %{HTTP_REFERER}     !^$

 # allow all requests from your domain
 # edit the domain to match your own
 RewriteCond %{HTTP_REFERER}     !^https?://([^.]+\.)?domain\.      [NC]

 # allow all requests from your ip address
 # edit the ip address to match your own
 RewriteCond %{HTTP_REFERER}     !^https?://123\.123\.123\.123(.*)$ [NC]

 # additional site access
 # include additional sites here replace domain names and or 
 # remove unnecessary lines or add new lines for more sites
 RewriteCond %{HTTP_REFERER}     !^https?://([^.]+\.)?domain_01\.   [NC]
 RewriteCond %{HTTP_REFERER}     !^https?://([^.]+\.)?domain_02\.   [NC]
 RewriteCond %{HTTP_REFERER}     !^https?://([^.]+\.)?domain_03\.   [NC]

 # search engine access
 # include or remove search engines feed readers and other sites
 RewriteCond %{HTTP_REFERER}     !search\?q=cache                   [NC]
 RewriteCond %{HTTP_REFERER}     !google\.                          [NC]
 RewriteCond %{HTTP_REFERER}     !yahoo\.                           [NC]

 # allow access to all requests for your anti hotlink image
 # to serve an image instead of delivering a 403 error
 # uncomment the next line and edit the path and file name
 # RewriteCond %{REQUEST_URI}    !^/hotlink\.jpg$                   [NC]

 # deliver the hotlink image for all requests for the listed files
 # protect additional file types by editing the list below
 # if you are serving a file instead of a 403 
 # uncomment the next line and edit the path and file name
 # RewriteRule \.(gif|jpe?g?|png)$ http://domain.tld/hotlink.jpg    [R,NC,L]

 # return a 403 error when any of the following file types is requested
 # you can protect additional file types by editing the list below
 RewriteRule \.(gif|jpe?g?|png)$                                  - [F,NC,L]

# close the module container
</ifModule>