Breaking News: Grepper is joining You.com. Read the official announcement!

htaccess block all referrer except my domain

Unsightly Unicorn answered on December 1, 2020 Popularity 1/10 Helpfulness 1/10

answer htaccess block all referrer except my domain

htaccess block all referrer except my domain

Comment

The first RewriteCond checks that the referrer is not empty. The second checks that it doesn't contain the string yourdomain.com, and the third that it doesn't contain the string alloweddomain.com. If all of these checks pass, the RewriteRule triggers and denies the request.

(Allowing empty referrers is generally a good idea, since browsers can generate them for various reasons, such as when:
the user has bookmarked the link,
the user entered the link manually into the address bar,
the user reloaded the page,
the browser is configured not to send cross-site referrer infromation, or
a proxy between your site and the browser strips away the referrer information.)

RewriteCond %{HTTP_REFERER} .
RewriteCond %{HTTP_REFERER} !yourdomain\.com [NC]
RewriteCond %{HTTP_REFERER} !alloweddomain\.com [NC]
RewriteRule .? - [F]

Popularity 1/10 Helpfulness 1/10 Language whatever

Source: stackoverflow.com

Tags: block except referrer whatever

Link to this answer
Share Copy Link