How to enable and configure hotlink protection
Hotlinking is embedding content from one website on another website. For instance, someone might see a lovely photo on your website and decide to embed it on their website, using the original image URL. In the same way other websites can include videos, fonts or even JavaScript files.
The practice is bad for both your website and the website on which the resource is embedded. If someone embeds an image that is hosted on your server then you are paying for the bandwidth every time the image is downloaded. And the website on which the photo is embedded can’t be sure that the image will continue to be available. If you remove the image then it is also no longer shown on the website that is doing the hotlinking.
You can stop websites hotlinking to your website by adding a rule to your .htaccess file. On cPanel servers you can also enable and configure hotlink protection via the control panel.
Hotlinking example
To illustrate how hotlink protection works, let’s imagine that I own example.com and that another website, penguins-unite.io, has embedded an image on its website that is hosted on my server:
<!DOCTYPE html>
<html lang="en-gb">
<head>
<meta charset="utf-8" />
<title>Penguins Unite!</title>
</head>
<body>
<h1>The online meeting place for all penguins</h1>
<img src="http://example.com/wp-content/uploads/2021/11/king-penguins.jpg" width="640" height="427" alt="Penguin Unite!" />
</body>
</html>
As the owner of example.com I can prevent the image is downloaded from my server. In cPanel, you can do so via Security » Hotlink Protection. On the page you can simply click the Enable button to enable hotlink protection. The only other thing to check are the URLs and extensions that should be protected.
Image: blocking image hotlinking in cPanel.
By default, cPanel’s hotlink protection blocks jpg, jpeg, gif, png and bmp files. You might want to tweak the list. For instance, if you host your own video files then you can add extensions such as mp4, ogv and webm to the list. Or, if you use custom fonts then you can add the font extensions as well. It all depends on the content on your website.
When you enable hotlink protection cPanel adds a rule to the .htaccess file for the domains you specified. The default rule looks like this:
# Block hotlinking requests
RewriteCond %{HTTP_REFERER} !^http://example.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://example.com$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.example.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.example.com$ [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp)$ - [F,NC]
The hotlinked image is now no longer showing on the penguins-unite.io website. Instead, it is blocked with an error 403 (“forbidden”).
Image: the hotlink protection in action.
Redirecting URLs
You can also redirect rather than block hotlinking requests. If you do so via cPanel, do not click the “Allow direct requests” checkbox. It will break your hotlinking rule. Just enter the URL (or the path to) the destination.
You can have lots of fun with this feature. For instance, here I redirect hotlinking requests to an image named do-not-hotlink.jpg.
Image: redirecting hotlinking requests.
The rule in the .htaccess file is similar to the previous one. The only difference is that the rewrite rule now redirects to the replacement image.
# Redirect hotlinking requests
RewriteCond %{HTTP_REFERER} !^http://example.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://example.com$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.example.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.example.com$ [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp)$ /wp-content/uploads/2021/11/do-not-hotlink.jpg [R,NC]
The replacement image do-not-hotlink.jpg is a photo of a My Little Pony character. So, the penguins-unite.io website now shows an image of a cute little pony rather than a penguin-related image.
Image: redirecting a hotlinking request. Credit: furbymama on pixabay.com.
If you look at the requests for the page you see that the king-penguins.jpg file now has the status code 302, which is a redirect. The redirect goes to the image of the pony.
Hanlon’s razor
Although hotlinking is a nuisance, it is usually done out of ignorance rather than malice. Someone probably used a WYSIWYG editor and simply copied and pasted the URL of an image on your website, without realising that the image will be downloaded from your server. Blocking the requests is easy and should be sufficient. Please don’t use the redirect feature to display offensive content on the website that is hotlinking.
Featured Blogs
Managed Kubernetes; A Convenient Solution for Businesses
Businesses are continually searching for new ways to streamline their operations and optimise their application deployment processes. Kubernetes, a powerful container orchestration platform, has become the go-to solution for managing containerised applications. Its ability to automate deployment, scaling and management of applications makes it ideal for any business currently running applications on multiple virtual machines …
Ways to Reduce Website Bounce Rates
When reviewing website performance and the success of digital marketing campaigns, there are several important metrics that business owners will compare. One of these metrics is the ‘bounce rate’ and a high bounce rate can be an indication that something isn’t working. Understanding what’s causing visitors to bounce off your website is key to making …
Preparing Your E-Commerce Website for Black Friday
Different times of the year present different challenges for retailers and e-commerce businesses. The lead-up to the holiday season is known for being busy and Black Friday, in particular, is a monumental day where shopping activity reaches a peak. With more businesses now offering Black Friday deals online for a few days or even a …
What is UX and How to Improve Your Website
When trying to reach a wider audience, having a good online presence is crucial. A website can help to increase brand awareness and get more people talking about your products or services. The importance of a website extends beyond brand visibility though, it will become a platform for customer engagement and business transactions. However, simply …
Common Website Mistakes to Avoid
More so than ever before, a website is a necessity. No matter whether you run a small, independent business or a multinational brand, having a good online presence can have a direct impact on exposure, sales and success. Your website is your digital storefront and it’s a way for you to reach more people, regardless …
Reasons Why Your Website is Loading Slowly
You can create a breathtaking website that provides an abundance of useful information to your customers, however, if it’s slow loading, then it might not be successful. Having a fast and efficient website is essential in today’s busy world, and customers expect to be able to access the information they need quickly and easily. If …
How Managed Dedicated Servers Can Impact Your Website’s ROI
Having a good online presence is crucial for businesses of all sizes. A high-performing website not only acts as a virtual storefront but also provides a powerful tool for marketing and revenue generation. Although there are costs associated with website development, maintenance and online marketing campaigns, your return on investment (ROI) can be significant if …
The Importance of Regular Server Backups
Without a server, your website wouldn’t be visible on the internet. A server provides the infrastructure and resources you need to deliver your website pages to visitors, and it’s key to ensure you’re choosing the right server for your needs. From Virtual Private Servers and cloud servers to dedicated servers, there is a wide range …
Useful Server Advice for Start-Up Businesses
In today’s digitally driven world, a website is a key marketing tool for start-up businesses. As you venture into new and exciting markets, a well-designed website is crucial for helping you to establish an online presence and engage with potential customers. It acts as a platform to showcase your products, services and USPs. Not to …
What is Server Downtime and How Can it be Avoided?
More so than ever before, people are reliant on the internet to find the products or services they need. So, server downtime can have a significant impact on businesses of all sizes. It is particularly detrimental to e-commerce businesses and those who operate solely online, and the importance of finding a reliable hosting solution can’t …
What our clients say
Everything is fine, thank you. The queries I had were dealt with in a prompt, professional and truly friendly manner! I have never experienced such superb service from any other supplier!
You guys and Catalyst2 are awesome!
