.htaccess hotlinking protection doesn't seem to be working

Discussion in 'Apache' started by disgust, Apr 3, 2006.

  1. #1
    here's my htaccess

    RewriteEngine on
    RewriteCond %{HTTP_REFERER} !^$
    RewriteCond %{HTTP_REFERER} !^http://(www\.)?ffshrine.org/.*$ [NC]
    RewriteCond %{HTTP_REFERER} !^http://gh.ffshrine.org/.*$ [NC]
    RewriteCond %{HTTP_REFERER} !^http://www.ffshrine.org/.*$ [NC]
    RewriteRule \.(jpg|mid|mp3|wav|wmv|mpg|mpeg|avi)$ http://gh.ffshrine.org [R,L]
    Code (markup):
    this page seems to be able to embedd my mp3s without any problem. why is this? is it simply because they're using the windows media player plugin, and that somehow gets around it?

    should I switch my hotlink protection from exclusive to inclusive? ie, instead of "if there's a referrer, and it's not one of the following, block the request.." change it to "there must be a referrer, and it must be one of the following"

    that would fix it, no? would that be too strict? would that lead to all sorts of side effects? how many people have referrer reporting completely turned off?
     
    disgust, Apr 3, 2006 IP