How can I prevent hotlinking? (nginx)

Question

I use nginx and I have no access to server conf.

May be with .htaccess analogue?..

score 7 · Answer 1 · 2010-02-14T15:38:07.283

7

location ~* (\.jpg|\.png|\.gif|\.jpeg)$ {
 valid_referers blocked www.domain.com domain.com;
 if ($invalid_referer) {
    return 403;
 }
  root   /srv/www/domain.com/public_html;
}

edited Feb 14 '10 at 15:38

answered Feb 14 '10 at 13:56

score 3 · Accepted Answer · answered Dec 06 '09 at 20:07

3

Without access to the server configuration, you cannot change any settings. There is no equivalent to Apache httpd's .htaccess in nginx.

answered Dec 06 '09 at 20:07

joschi

21,955

score 2 · Answer 3 · answered Nov 18 '11 at 18:04

2

Just in case you HAVE access to the webserver:

location ~* (\.jpg|\.png|\.gif|\.jpeg|\.png)$ {
 valid_referers none blocked www.example.com example.com;
 if ($invalid_referer) {
    return 403;
 }
}

answered Nov 18 '11 at 18:04

alfish

3,217

score 0 · Answer 4 · answered Dec 06 '09 at 23:46

0

joschi is right: nginx is driven by a single configuration file you can't edit. Your only possibility is to use a redirector script which says '403 Access Denied' for hotlinks and '301 Moved Permanently' for normal links.

answered Dec 06 '09 at 23:46

kolypto

11,588

score 0 · Answer 5 · answered Dec 07 '09 at 00:43

One solution is to generate all your pages & content dynamically, and with different URLs every time, which expire after a while. That makes hotlinking impossible.

If that is not practical, you can also check referrer. If you cannot reconfigure nginx, you'll probably have to do it in a scripting language which generates the pages dynamically.

How can I prevent hotlinking? (nginx)

5 Answers5

Linked