.htaccess - RewriteRule condition if url contains

Question

In my .htaccess, it return 403 if user accesses image directly, but allows them to be displayed on site. I've read (htaccess) How to prevent a file from DIRECT URL ACCESS? in order to achieve this.

This is my .htaccess

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://(www\.)?myapp.dev/ [NC]
RewriteRule \.(gif|jpg|JPG|jpeg|png)$ - [F]
Options -Indexes

What I want to do next is that if the url contains "pdf" (e.g. myapp.dev/pdf/stuff.png) I will not use or skip this code

RewriteRule \.(gif|jpg|JPG|jpeg|png)$ - [F]

Maybe I could modify the RewriteCond or the RewriteRule and add a condition...

Any ideas/alternatives will be of help!

Amit Verma · Answer 1 · 2016-05-23T08:48:02.533

0

To forbid .pdf requests , you can use :

RewriteRule \.pdf$ - [F,NC]

Edit :

Options -Indexes
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://(www\.)?myapp.dev/ [NC]
RewriteRule ((?!pdf).+)\.(gif|jpg|JPG|jpeg|png)$ - [F]

edited May 23 '16 at 08:48

answered May 23 '16 at 08:11

Amit Verma

I updated my question, I apologize for the confusion. – yowza May 23 '16 at 08:19
Do you mean "if the requested url is **pdf.png** or **foo.pdf** ? – Amit Verma May 23 '16 at 08:37
If the requested url is something like this: `myapp.dev/pdf/stuff.png` – yowza May 23 '16 at 08:38
It gave me Internal Server Error :D I'll tweak what you gave me, I appreciate the help @starkeen. – yowza May 23 '16 at 08:46
Sorry, my mistake, i forgot to remove the leading backslash. – Amit Verma May 23 '16 at 08:49
It's still forbidden :/ – yowza May 23 '16 at 08:55

1 Answers1