Allow hotlinking for thumbnails? Allow hotlinking for thumbnails?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Allow hotlinking for thumbnails?

Started by AvrilBoi, May 23, 2007, 11:53:49 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

AvrilBoi

Hi!
I have put a .htaccess file in my /albums/ folder, to prevent hotlinking.
This is the code:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?allowed_site_1.com [NC]
RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?allowed_site_2.com [NC]
RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?allowed_site_3.com [NC]
RewriteRule \.(jpg|jpeg|png|gif|bmp)$ http://www.alternative_server.com/hotlink.gif [NC,R,L]

Is there any way to allow people to hotlink thumbnails? My thumbnails are named by coppermine default: "thumb_filename.jpg"
Thanks

Tranz

It doesn't seem possible unless you use a different file extension for thumbs. For example, if you use .jpeg for thumbnails and erase jpeg from the list of protected files types.

This would require making changes to the Coppermine code, so I wouldn't really recommend it. Perhaps someone could propose a better idea.

Joachim Müller

There's no easy solution: you either allow hotlinking or you disallow it. You can't come up with a determination that hotlinking of thumbs is allowed, but intermediate/fullsize hotlinking is forbidden.
As Thu suggested: it would require extreme hacking to accomplish this.

AvrilBoi

Ok thanks...
I've asked that because I've read something like this
RewriteCond %{REQUEST_FILENAME} !(.*thumb|.*highlight) [NC]
somewhere else so I thought that would be possible.

AvrilBoi

Sorry for this double post, but I just figured out that that code works!
RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !(.*thumb|.*highlight) [NC]
RewriteCond %{HTTP_REFERER} !^$
etc. etc.

Tranz

Interesting. Thanks for coming back and posting the solution.