Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The problems I'm facing is how to prevent hotlinking from within a website. What I want to do is to block from hotlinking a CSS, but allow to use the CSS using .htaccess.

-Both user xxx and user aaa is using css file, I only want to allow user aaa to be able to use it and not user xxx

What I manage to come up with so far is is putting a .htaccess in to only allow user aaa to hotlink the css.

RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http(s)?://( [NC]
RewriteRule \.(css|jpg|jpeg|png|gif)$ [NC,R]

When I put this into the .htaccess it blocks both and from hotlinking the css

What I want to do is allow only this page to use the css and block anything else from hotlinking it.

share|improve this question

migrated from Jul 5 '11 at 3:26

This question came from our site for professional and enthusiast programmers.

The flags [L] and/or [F] are missing from your RewriteRule I am not certain if that would make the difference?

The ! in the *RewriteCond %{HTTP_REFERER} ^ or RewriteCond %{HTTP_REFERER} !^ \reverses the logical condition.


RewriteCond %{HTTP_REFERER} !^http://(.+\.)?mysite\.com/
RewriteRule .*\.(jpe?g|gif|bmp|png)$ [L]

Says if it is "!" NOT mysite then "[L]" DON'T allow it which is a double negative to allow if from your site.

Correction [L] is the flag for LAST - [F] is forbidden and I need to get my glasses checked.

share|improve this answer
That shouldn't have made a difference since [L] just tells when to stop the Rewrite Engine and I don't know what [F] do. Anyway my problem was that I had a pointless "(" in the second line. I removed it and everything worked perfectly. – John Smith Jul 5 '11 at 0:20
Thanks, It was the only difference I saw between your code and the code that works ... I did not see that ( either – Wayne Jul 5 '11 at 0:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.