Denying access via .htaccess according to referrer

.htaccessapache-2.2

I'm trying to block access to my website depending on whether a visitor had visited the site through another website. The latter has been using up my traffic by using an iframe to display content through his site, masking my site's identity.

I have mod_env_if activated in apache2.

ErrorDocument 403 /error403.html
SetEnv noaccess=0
SetEnvIf Referer "^http://sitetoblock\.tk/" noaccess=1
SetEnvIf Referer "^http://www\.sitetoblock\.tk/" noaccess=1


<FilesMatch "\.(gif|png|jpe?g|php|html)$">
Order Allow,Deny
Deny from env=noaccess

</FilesMatch>

The problem is that this directive is blocking all traffic including direct visitors to the site. What am I doing wrong?

Best Answer

In your configuration, default access state is "Deny" because you have "Order Allow,Deny". Change the Order to "Deny, Allow" so you can explicitly deny access based on your referer check.

Related Solutions

Strange traffic causing strange 302 redirect

I don't have any conjectures why you're getting the second 302, but I can help you with the logging.

You can try a %{Location}o format string in a LogFormat to log the value of the Location response header.

LogFormat "%s %U -> %302{Location}o" redirect
CustomLog "/path/to/redirect_log" redirect

You might want to use "%>s" instead of "%s" to get the final status, or use both. If you can set a REDIRECT environment variable when you generate the 302 response, you can limit the entries in redirect log to only redirected responses by appending "env=REDIRECT" to the CustomLog directive.

Are any the redirected visitors using big name browsers?

Apache 2.2 – How to Redirect Root via .htaccess

Try this:

RewriteEngine on
RewriteCond %{HTTP_HOST} mysite\.com [NC]
RewriteCond %{REQUEST_URI} ^/$
Rewriterule ^(.*)$ http://mysecondsite.com/ [L,R=301]

If you don't need to check for the old domain (for example, if the directory where your .htaccess is placed is only used by the old domain) you can remove the second line.

Best Answer

Related Solutions

Strange traffic causing strange 302 redirect

Apache 2.2 – How to Redirect Root via .htaccess

Related Topic