描述
Hotlink File Prevention (HFP) offers simple hotlink protection that can be turned on/off for individual files in the WordPress media library.
“Hotlinking” is when a file, such as an image or PDF, is linked to from another website or entered manually in a web browser’s location bar. HFP only allows your file to be viewed on your website.
Hotlink protection is provided via .htaccess rules in the wp-content/uploads directory.
Basic Usage
Once the HFP plugin is activated, you will have two new features in the media library:
- Within the Screen Options tab (list view only), check box for the “Hotlink Prevention” column.
- To protect a file, edit the file and scroll down to the checkbox labelled “Hotlink Protection”.
Any asset that is checked will have “Yes” displayed in the “Hotlink Prevention” column; otherwise, this column will be blank.
Note about “Open in new tab” option
When you use the “Open in new tab” option for links, WordPress adds rel="noreferrer", which effectively makes the link act like direct access, and the link will be blocked for files protected using HFP.
螢幕截圖
Checkbox in the file edit dialog
安裝
- Go to “Plugins > Add New” in the WordPress admin area.
- Search for “Hotlink File Prevention”.
- Install, then Activate the plugin.
For more installation options and instructions, see “Installing Plugins” on WordPress.org.
常見問題
-
How does HFP work?
-
HFP creates an Apache
.htaccessfile in thewp-content/uploadsdirectory. It sets a HTTP_REFERER check and RewriteRule for each file that has hotlink protection applied. Toggling hotlink protection on/off dynamically adds/removes RewriteRule statements. -
Can it be used with any type of media file?
-
Yes, it works with any file that you upload to the media library.
-
Are my files absolutely safe using this plugin?
-
Here’s the deal: This plugin makes it harder for people to hotlink to your files, but if they are highly technical, they will be able to do things like fake the HTTP referrer.
-
Does it with with web servers other than Apache?
-
The server must process rewrite rules in
.htaccess. So HFP will work on Apache and LightSpeed servers, but not NGINX.
評價
貢獻者及開發者
修改日誌
2.0.0
- Track protected files in wp_options table instead of individual post meta
- Fixed htaccess rules to work with multiple protected files
- Use insert_with_markers() to handle writing to htaccess
- Added CSS for media library table column
- Added uninstall hook
1.1.0
- Modernized the code, and got it working again!
- Updated README
- Changed some strings, and made them translation-ready
- Moved Hotlink Protection column before Date
- Added deactivation hook to remove htaccess file
1.0.1
- commented out error reporting
- now uses just filename (followed by full path and name) in .htaccess; previously this was full path and location alone. Version 1.0.0 users should delete .htaccess from /uploads directory and rebuild file by clicking “update” on any file in Media Library that has “Yes” for Hotlink File Prevention.
1.0.0
- Development version and Alpha release.