MyBB Community Forums

Full Version: Prevent direct file access, allow embed
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
I like to secure the files on my subdomain. I have my pdf files on pdf.domain.net. These files are embedded on www.domain.net.
I want to disallow direct file access on pdf.domain.net, but only allow embedded pdf via www.domain.net.

I think using htaccess with
SetEnvIfNoCase Referer "^http://www.domain.net/" good
is not good enough because advanced users can change referral in their browser.

Any idea?