我需要保护我的 php 网站免受热链接的影响。我该如何实现这一点?我使用 nginx 作为网络服务器。如果我尝试查看site.com/uploads/image.jpg无需登录我可以在浏览器中看到图像,我需要防止无需登录即可直接访问文件夹。
我的项目结构
site
-index.php
-uploads/image.jpg....
-css/
-js/
站点配置文件
server {
listen site.com;
server_name site.com;
root /home/vijo/Music/PHP/site;
index index.php index.html index.htm;
keepalive_timeout 70;
access_log /home/vijo/Music/PHP/site/log/access.log;
error_log /home/vijo/Music/PHP/site/log/error.log;
# Make site accessible from http://localhost/
location / {
try_files $uri $uri/ @rewrite;
expires max;
}
location @rewrite {
rewrite ^ /index.php;
}
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
location ~ /\.ht {
deny all;
}
}
答案1
示例配置如下
:https://thebarton.org/prevent-hotlinking-nginx/
http://techgirlkb.guru/2017/08/preventing-site-mirroring-via-hotlinking/
location ~* \.(gif|png|jpe?g)$ {
expires 7d;
add_header Pragma public;
add_header Cache-Control "public, must-revalidate, proxy-revalidate";
# prevent hotlink
valid_referers none blocked ~.google. ~.bing. ~.yahoo. server_names ~($host);
if ($invalid_referer) {
rewrite (.*) /static/images/hotlink-denied.jpg redirect;
# drop the 'redirect' flag for redirect without URL change (internal rewrite)
}
}
# stop hotlink loop
location = /static/images/hotlink-denied.jpg { }