special anty hotlink

[benek]

hi

i need such antyhotlink that from other domain hotlink will impossible but from my own domain will possible?

do you know how to do this?

[Anothers]

it's easy with htaccess


RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$ [NC]
RewriteCond %{HTTP_REFERER} !^http(s)?://cgi.(aol\.)?ebay\.com [NC]
RewriteCond %{HTTP_REFERER} !^(wy[sc]iwyg://[0-9]*/)?http(s)?://YOUR_SITE_IP [NC]
RewriteCond %{HTTP_REFERER} !^(wy[sc]iwyg://[0-9]*/)?http(s)?://YOUR_SITE_DOMAIN [NC]
RewriteCond %{HTTP_REFERER} !^(wy[sc]iwyg://[0-9]*/)?http(s)?://OTHER_SITE_DOMAIN [NC]
RewriteRule \.(bmp|gif|jpe?g)$ - [F,L]


where
YOUR_SITE_IP = your server ip 123.123.123.123
YOUR_SITE_DOMAIN = www.my_cool_domain.com

OTHER_SITE_DOMAIN - other domain that you allow hotlink

[dgraf]

All the rules are trickable as they are shown here and almost everywhere on the web. Always terminate the condition line by something like this --


(/|\?|$)


Example --


RewriteCond %{HTTP_REFERER} !^(wy[sc]iwyg://[0-9]*/)?http(s)?://YOUR_SITE_IP(/|\?|$) [NC]


Otherwise the referer can by tricked by passing referer like this one -
http://www.yourdomain.com.my-evil-hotlinkingdomain.com

It is not a problem to setup a vhost which will fit your regexp needs and this mistake is the worse since it is highly predictable.

Another good idea should be allowing access to pictures from image searches and probably from local stored pages too.


# Allow Saved Pages
RewriteCond %{HTTP_REFERER} !^file://.*$ [NC]

# Search Engines
RewriteCond %{HTTP_REFERER} !^http://([^/]*\.)?google\.(.{2}\.)?.{2,3}/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://([^/]*\.)?yahoo\.(.){2,3}/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://216\.239\.59\.104/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://64\.233\.161\.104/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://66\.102\.7\.104/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://64\.233\.167\.104/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://216\.239\.41\.104/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://216\.239\.39\.104/.*$ [NC]

(just example without editing)

Oh my god I did it! My first post here ...

(edited to add the code tags)

[Anothers]

yeap

dgraf is right about that ("always terminate the condition line")

EDITED:
it can be easy tricked with vhosts when there is no termination