Description
Hotlink File Prevention (HFP) offers simple hotlink protection that can be turned on/off for individual files in the WordPress media library.
« Hotlinking » is when a file, such as an image or PDF, is linked to from another website or entered manually in a web browser’s location bar. HFP only allows your file to be viewed on your website.
Hotlink protection is provided via .htaccess rules in the wp-content/uploads directory.
Basic Usage
Once the HFP plugin is activated, you will have two new features in the media library:
- Within the Screen Options tab (list view only), check box for the « Hotlink Prevention » column.
- To protect a file, edit the file and scroll down to the checkbox labelled « Hotlink Protection ».
Any asset that is checked will have « Yes » displayed in the « Hotlink Prevention » column; otherwise, this column will be blank.
Note about « Open in new tab » option
When you use the « Open in new tab » option for links, WordPress adds rel="noreferrer", which effectively makes the link act like direct access, and the link will be blocked for files protected using HFP.
Captures d’écran
Checkbox in the file edit dialog
Installation
- Go to « Plugins > Add New » in the WordPress admin area.
- Search for « Hotlink File Prevention ».
- Install, then Activate the plugin.
For more installation options and instructions, see « Installing Plugins » on WordPress.org.
FAQ
-
How does HFP work?
-
HFP creates an Apache
.htaccessfile in thewp-content/uploadsdirectory. It sets a HTTP_REFERER check and RewriteRule for each file that has hotlink protection applied. Toggling hotlink protection on/off dynamically adds/removes RewriteRule statements. -
Can it be used with any type of media file?
-
Yes, it works with any file that you upload to the media library.
-
Are my files absolutely safe using this plugin?
-
Here’s the deal: This plugin makes it harder for people to hotlink to your files, but if they are highly technical, they will be able to do things like fake the HTTP referrer.
-
Does it with with web servers other than Apache?
-
The server must process rewrite rules in
.htaccess. So HFP will work on Apache and LightSpeed servers, but not NGINX.
Avis
Contributeurs/contributrices & développeurs/développeuses
« Hotlink File Prevention » est un logiciel libre. Les personnes suivantes ont contribué à cette extension.
Contributeurs
Traduisez « Hotlink File Prevention » dans votre langue.
Le développement vous intéresse ?
Parcourir le code, consulter le SVN dépôt, ou s’inscrire au journal de développement par RSS.
Journal
2.0.0
- Track protected files in wp_options table instead of individual post meta
- Fixed htaccess rules to work with multiple protected files
- Use insert_with_markers() to handle writing to htaccess
- Added CSS for media library table column
- Added uninstall hook
1.1.0
- Modernized the code, and got it working again!
- Updated README
- Changed some strings, and made them translation-ready
- Moved Hotlink Protection column before Date
- Added deactivation hook to remove htaccess file
1.0.1
- commented out error reporting
- now uses just filename (followed by full path and name) in .htaccess; previously this was full path and location alone. Version 1.0.0 users should delete .htaccess from /uploads directory and rebuild file by clicking « update » on any file in Media Library that has « Yes » for Hotlink File Prevention.
1.0.0
- Development version and Alpha release.