[CasualNerd]

Is it possible to block hotlinking of full size images but allow hotlinking of thumbnails ? I have tried the tricks I know with htaccess, but because all the images are in the same folder it's very difficult and I haven't worked out a solution yet.

Otherwise, is it possible to change the destination folder of the uploaded images so they end up in a different folder to the generated thumbnails, so I could use different htaccess files in each folder ?

I've asked this question elsewhere and it seems possible to do, but I can't get it to work.

[Anthony]

One way to get it to work would be to have it block hotlinking, then explicitly allow hotlinking of images that contain _thumb in the name.

I've only worked sparingly with htaccess, so I may be wrong, but doesn't the statements execute in order? Meaning that the second one allowing the _thumb would override the first one.

Just a thought, haven't worked with .htaccess files in over a year, and only long enough to get my server working how I wanted it. So that could be horribly inefficient, or just plain incorrect. ~_~'

[CasualNerd]

Yep, that's as far as I got, I have the code if someone is good with htaccess, but everytime I try it, I get something wrong - it blocks all images, or none, or blocks images loading on my own site etc.

[Anthony]

Well if the only problem is it's also blocking the images loading on your site, all you need is to explicitly allow any requests from your domain/referrer/internal IP address or whatever.
I didn't handle setting up most of my server, but I recall having to use htaccess to correct virtual hosting issues. Someone i know is rather good with them, if you want to post the code I can send it his way and see if he can fix it.

[Josh D.]

Try this:

RewriteEngine on

RewriteCond %{HTTP_REFERER} !^$

#allow hotlinking for thumbnails
RewriteCond %{REQUEST_URI} !_thumb

#allowed website to hotlink  (don't forget to add your own site !!)
RewriteCond %{HTTP_REFERER} !^http://(www\.)?domain.com(/)?.*$ [NC] 

#display no-hotlink.jpg instead of the requested image
RewriteRule \.(jpg|jpeg|gif|png|bmp|ico)$ http://www.domain.com/no-hotlink.jpg [NC,R,L]

Replace domain.com with your domain name.

This post has been edited by Josh D.: 12 October 2009 - 08:26 PM

[CasualNerd]

Here's the code I was using when I was closest to getting it to work correctly:

CODE

<Files ~ "^.*\.(php|cgi|pl|php3|php4|php5|php6|phtml|shtml)">
    Order allow,deny
    Deny from all
</Files>

ErrorDocument 404 /css/images/error404.gif

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^(www\.)?mydomain\.com [NC]
RewriteCond %{REQUEST_URI} !_thumb\.
RewriteRule \.(gif|jpg|jpeg|png)$ http://www.mydomain.com/css/images/errorhotlink.gif [R=301,L]

Unfortunately it was blocking large images on my own site as well ! Can anyone work out what I've done wrong ? (I did enter my actual domain name )

This post has been edited by CasualNerd: 15 May 2009 - 02:27 AM

[Anthony]

Did you try Josh D's method?

[CasualNerd]

Did you try Josh D's method?

I will, I just need to have some free time, last time I spent hours breaking and fixing things.

[Mudassar]

I tested it too. But not working too

CODE

RewriteEngine on

RewriteCond %{HTTP_REFERER} !^$

#allow hotlinking for thumbnails
RewriteCond %{REQUEST_URI} !_thumb

#allowed website to hotlink  (don't forget to add your own site !!)
RewriteCond %{HTTP_REFERER} !^http://(www\.)?4img.us(/)?.*$ [NC]

#display no-hotlink.jpg instead of the requested image
RewriteRule \.(jpg|jpeg|gif|png|bmp|ico)$ http://www.4img.us/no-hotlink.jpg [NC,R,L]

Please help.

[Josh D.]

Using the code I posted:



Image: http://www.hostmine....hvkq4k7bai1.jpg

This post has been edited by Josh D.: 21 April 2010 - 08:58 AM

[CasualNerd]

I have tried your method josh, with unusual results.

It blocks some full images but not others, I can't work out why. It also blocks full images from being displayed in the image host viewer page, even though I excepted the domain in the appropriate spot.

I've looked for errors but I can't work it out at all.

[jojo]

i have tried josh method and it's not working either
yesterday my bandwidth goes from 3GB daily to suddenly +150GB daily
some is hotlinking hundreds of images

[jojo]

now it works I removed the cache and cookies
thank you Josh

[CasualNerd]

jojo, did you notice any of the problems I was having when it worked ?

I'm trying to work out what I've done wrong...

[jojo]

jojo, did you notice any of the problems I was having when it worked ?

I'm trying to work out what I've done wrong...

no it works for me , first it wasn't work but when I delete cookies and cache and even change my ip and start with fresh browser it works like a charm
it doesn't block large images on your site , only on others sites

[CasualNerd]

Looks like I'll have to try again !

[Anthony]

Maybe it's your server settings?
Not exactly sure what settings would do that though. >.<

[Poison]

I have the same problem for the last days... with the hotlinking.

HUGE amount of bandwidth wasted in the last 4 days : about 10-15 gb each day .. and I have only a few visitors a day.

I've tried Josh D solution of htacess mod, but even after this, in 10 hours, I've lost another 10 gb of bandwidth.

Questions:
1) How can I find what pictures are hotlinked?
2) How can I find what pictures are most visited ? (and consuming the most bandwidth) ?

[jojo]

I have the same problem for the last days... with the hotlinking.

HUGE amount of bandwidth wasted in the last 4 days : about 10-15 gb each day .. and I have only a few visitors a day.

I've tried Josh D solution of htacess mod, but even after this, in 10 hours, I've lost another 10 gb of bandwidth.

Questions:
1) How can I find what pictures are hotlinked?
2) How can I find what pictures are most visited ? (and consuming the most bandwidth) ?

see the server logs via cPanel or DirectAdmin
it will show you who send lot of hits , most probably a Chinese forums they usually send huge amount of visitors

[Poison]

see the server logs via cPanel or DirectAdmin
it will show you who send lot of hits , most probably a Chinese forums they usually send huge amount of visitors

thanks mate.

yes, I see in cpanel, in awstats, at referrers, a LOT of hits (not visits) , from chinese forums. I have about 100 visitors a day, but over 100.000 hits from those forums daily,

Now, I will wait to see what wil happen after I modify the .htacess, and after I removed the direct link when uploading the pictures.