Hotlink Protection
Hotlink Protection prevents your images from being used by other sites, which can reduce the bandwidth consumed by your origin server.
Background
When Cloudflare receives an image request for your site, we check to ensure the request did not originate from visitors on another site. Visitors to your domain will still be able to download and view images.
Technically, this means that Hotlink Protection denies access to requests when the HTTP referer does not include your website domain name (and is not blank).
Hotlink protection has no impact on crawling, but it will prevent the images from being displayed on sites such as Google images, Pinterest, and Facebook.
Enable Hotlink Protection
To enable Hotlink Protection in the dashboard:
- Log into the Cloudflare dashboard.
- Select your account and website.
- Go to Scrape Shield.
- For Hotlink Protection, switch the toggle to On.
PATCH
request with hotlink_protection
as the setting name in the URI path, and the value
parameter set to "on"
. Allow hotlinking to specific images
You may want certain images to be hotlinked to, whether by external websites (like Google) or certain situations like when using an RSS feed.
Configuration rules
To disable Hotlink Protection selectively, create a Configuration Rule covering the path of an image folder.
hotlink-ok directory
You can allow certain images to be hotlinked by placing them in a directory named hotlink-ok
. The hotlink-ok
directory can be placed anywhere on your website.
To allow another website to use logo.png
from example.com
, put logo.png
in a new folder called hotlink-ok
.
Some examples of URLs that will not be checked for hotlinking:
http://example.com/hotlink-ok/pic.jpg
http://example.com/images/hotlink-ok/pic.jpg
http://example.com/hotlink-ok/images/pic.jpg
http://example.com/images/main-site/hotlink-ok/pic.jpg