Modifying rewrite to prevent hotlink access to certain php files only. 1

[nerbonne]

Hi,

I've tested this hotlinking code in my htaccess file and it works good. The problem is that it blocks all files of the type specified. Can anyone tell me how to modify it to block a certain file only?

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^

http://(.+\.)?mysite\.com/

[NC]
RewriteCond %{HTTP_REFERER} !^$
RewriteRule .*\.(php)$ /index.php [L]

 

[feherke]

Hi

Then put the name there, instead of the asterisk ( * ) expression.

[small]RewriteEngine On
RewriteCond %{HTTP_REFERER} !^[URL unfurl="true"]http://(.+\.)?mysite\.com/[/URL] [NC]
RewriteCond %{HTTP_REFERER} !^$[/small]
RewriteRule [red]^/path/to/certain[/red]\.php$ /index.php [L]

Feherke.

http://rootshell.be/~feherke/

 

[nerbonne]

That worked great, but, can I add a second line that does restrict images from being hotlinked? I mean, I got it to work, but when the main site loads, the images are broken and the .css doesn't load. Does it matter that the images are in a subdirectory?

 

[feherke]

Hi

I do not understand you. That [tt]RewriteRule[/tt] blocks only one PHP file. Unless that PHP file is called on requests for images and styles, it has nothing to do with them. There must be other reason for the missing images.

Feherke.

http://rootshell.be/~feherke/

 

[nerbonne]

Like this:

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^

http://(.+\.)?mysite\.com/

[NC]
RewriteCond %{HTTP_REFERER} !^$
RewriteRule ^details\.php$ /index.php [L]
RewriteRule .*\.(jpe?g|gif|bmp|png)$ /index.php [L]


Both rules work. When I hotlink to details.php, I get the homepage just fine. When I hotlink to site.com/subfolder/image.jpg, I get the homepage, but all the images are broken.

Obviously this is because you can't hotlink images, so how can I restrict the hotlinking ban to the subfolder images only.

 

[feherke]

Hi

That will not work, because the [tt]RewriteCond[/tt] rules are applied only to the very next [tt]RewriteRule[/tt] and not to the following ones.

You can either duplicate the [tt]RewriteCond[/tt]s before the second [tt]RewriteRule[/tt] or use only on [tt]RewriteRule[/tt] with an expression witch contains both conditions.

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^[URL unfurl="true"]http://(.+\.)?mysite\.com/[/URL] [NC]
RewriteCond %{HTTP_REFERER} !^$
RewriteRule ^details\.php$ /index.php [L]
[red]RewriteCond %{HTTP_REFERER} !^[URL unfurl="true"]http://(.+\.)?mysite\.com/[/URL] [NC]
RewriteCond %{HTTP_REFERER} !^$[/red]
RewriteRule .*\.(jpe?g|gif|bmp|png)$ /index.php [L]

[gray]# or[/gray]

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^[URL unfurl="true"]http://(.+\.)?mysite\.com/[/URL] [NC]
RewriteCond %{HTTP_REFERER} !^$
RewriteRule ^[red]([/red]details\.php[red]|[/red].*\.(jpe?g|gif|bmp|png)[red])[/red]$ /index.php [L]

Feherke.

http://rootshell.be/~feherke/

 

[nerbonne]

Ahh, I see. Thanks. You're a stud...

 

[nerbonne]

Well, the image hotlinking still shows errors on the homepage. See, the first link works properly, but the second does not.

http://www.bysarahj.com/details.php?gid=63&sgid=&pid=665

http://www.bysarahj.com/stock_photos/4217.jpg