RewriteCond

[DonP]

I've read everything I can find on the subject but can't get this to work properly. I'm trying to block the direct linking of my images from outside the sites. It blocks some, but not all, images even when loaded through one of the domains listed. I tried adding "php" to the list as some images use a php file to load them. Any ideas?

RewriteEngine on
RewriteCond !%{HTTP_REFERER} !^$
RewriteCond !%{HTTP_REFERER} !^[URL unfurl="true"]http://localhost\:8080*$[/URL] [NC,OR]
RewriteCond !%{HTTP_REFERER} ^[URL unfurl="true"]http://(www\.)?domain.com/.*$[/URL] [NC,OR]
RewriteCond !%{HTTP_REFERER} ^[URL unfurl="true"]http://(www\.)?domain.net/.*$[/URL] [NC,OR]
RewriteCond !%{HTTP_REFERER} ^[URL unfurl="true"]http://(www\.)?domain.org/.*$[/URL] [NC]
RewriteRule \.(php|gif|jpe?g|png|wav|mpg|mp3|swd|swf)$ [URL unfurl="true"]http://www.domain.com/images/system_images/nolinks.jpg[/URL] [R,NC,L]

Also, the above seems to crash when used with:

Options -Indexes Includes

but does not crash when I remove "Includes". I don't need Includes but I am curious why it causes the problem.

Don

http://www.pc-homepage.com/

http://www.personalzone.net/

Experienced in HTML, Perl, PHP, VBScript, PWS, IIS and Apache and MS-Access, MS-SQL, MySQL databases

 

[feherke]

Hi

I have no working Apache handy, so just one strange thing I see there. When negate a match, you have to put the exclamation mark ( ! ) only before the pattern.

RewriteCond %{HTTP_REFERER} !^$

But anyway, do not expect to much from this method. Is easy to fake the HTTP_REFERER.

Feherke.

http://rootshell.be/~feherke/

 

[DonP]

Oops! That was an error in the posting. I had taken out the ! temporarily and put it back in the wrong place when I posted it. This is actually what it has:

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^[URL unfurl="true"]http://localhost\:8080*$[/URL] [NC,OR]
RewriteCond %{HTTP_REFERER} !^[URL unfurl="true"]http://(www\.)?domain.com/.*$[/URL] [NC,OR]
RewriteCond %{HTTP_REFERER} !^[URL unfurl="true"]http://(www\.)?domain.net/.*$[/URL] [NC,OR]
RewriteCond %{HTTP_REFERER} !^[URL unfurl="true"]http://(www\.)?domain.org/.*$[/URL] [NC]
RewriteRule \.(php|gif|jpe?g|png|wav|mpg|mp3|swd|swf)$ [URL unfurl="true"]http://www.domain.com/images/system_images/nolinks.jpg[/URL] [R,NC,L]

Thanks for pointing it out. No, I don't expect a lot from it. It's for a fan site of a '50s singer so I just want to minimize others from direct linking to the images.

It seems to behave differently on my development system, which has Apache2, than it does on the live server, which has an older Apache. It's not clear if this is due to the different version of Apache or to the port my local copy uses. I wasn't sure if I needed to include it as part of the RewriteCond or not.

Some examples I found showed the dot escaped while others did not. Should it be domain\.com or not?

Don

http://www.pc-homepage.com/

http://www.personalzone.net/

Experienced in HTML, Perl, PHP, VBScript, PWS, IIS and Apache and MS-Access, MS-SQL, MySQL databases

 

[feherke]

Hi

Yes, while that is a regular expression and dot ( . ) is metacharacter, you must escape it, to work as expected.

About the version incompatibilities, I noticed them myself too. But did not found any documentation of those changed behaviours, so finally I gave it up and not used [tt]mod_rewrite[/tt].

Feherke.

http://rootshell.be/~feherke/