attachment.php domain restrictions

[zlos]

Hi

I am experiencing high bandwidth steal due to the fact, that attachment.php has no restrictions where it is opened/called from.

The question: How can I limit domains, which are entitled to call attachment.php? Also if it is used as link to attachment.php being posted on another forums or sites?

Any idea?

[Wayne Luke]

Restrict guests from viewing attachments in the usergroup manager and instead of the sites showing your content, they will get a no permission page.

The other thing you should look into is hotlink protection via mod_rewrite and .htaccess.

[zlos]

Restrict guests from viewing attachments in the usergroup manager and instead of the sites showing your content, they will get a no permission page.

The other thing you should look into is hotlink protection via mod_rewrite and .htaccess.

Thanks, I will give a mod_rewrite a try I have attachments stored as files and it should be better protected as simply from php level