Bring back this old topic.

AA, I see your banana is still being stolen. :rolleyes:

So, if I wanted to use the Apache htaccess dealie, how would I write it if I wanted to excluse a directory in my domain. I need at least one directory so I can post images.

Thanks for the help!

This is exactly what I want. I want to prevent hotlinking of the images inside my graemlins, avatars, graphics, and ubb directory, but I want to allow hotlinking from my webroot

Good to know other people make use of this. I'd include mine but it's about 3 pages long... I have it for: exe|zip|c|jpg|gif|bat|tar|gz|tgz but with numerous allowed sites (including the IP for my site since it's dedicated (I work for the host so why not lol)).

Your instructions are about the same as I have in the KBASE at HostNuke lol.

Keep in mind that users who use security suites or right click and choose save as will in most cases error out since their browser will send a blank referrer.

To allow these users you use the line:
The only way to actually allow them is to allow blank referrers but that'll leave your info open to people who just choose save as from remote locations ...

Hey there,

reviving this topic again, I would like to know following:

I have set up a wiki (mediawiki 1.3) for University, which has the purpose to get the materials we use at certain seminars. The wiki itself is restricted enough, so you cannot see pages w/o logging in and you can't create accounts for yourself.
Okay, now the thing is: when you upload the pdfs, the directories in ..[wiki-folder]/images are created somehow randomly, like images/1/1f/file.pdf, so I cannot create .htaccess files for each folder, only for images (i dont know, where the files go before uploading them and it would be lots of work to do it for each folder separately).

I tried the codes that were posted before, but it was still possible to get the files without being logged in.

So, how do I limit downloading the pdfs to clicking on the wiki-links?

almost resigning,

Aeris

That should work for your use. Note that the should only be used if you want "blank referrers" to be allowed access (basically someone pasting the URL into their browser).