We used to have hotlinking prevented to our downloads via the settings in the plugin, but I would like to disable that setting so our files can be linked to from external sites again. However, the option appears to have been removed from the settings page. How can I ensure hotlinking is enabled for our downloads? I tried searching the documentation but got an error about too many redirects. I found via github release notes that the setting was hidden, so I would like to know how I can deactivate it when it was previously enabled.
Any assistance would be appreciated. Thank you!
]]>The logo is not displayed in the pdf invoice – please can you help?
How to reproduce:
Plugin: Flexible Invoices for WooCommerce and WordPress, Version 5.6.14
WordPress: 6.2.2
I searched on your website and forum but couldn’t find any known issue or solution. The following instructions did not work (the image is accessible, and removing/reconfiguring the logo did not solve the problem):
https://docs.flexibleinvoices.com/article/833-the-document-has-got-missing-parts-signature-logo
Many thanks for your help!
]]>I have downloaded the plugin and activated, but it doesn’t work checking thru this hotlink checker website : https://altlab.com/hotlinkchecker.php
I have follewd some other topics before to contact you and I have also modify the HTaccess on my host provider Siteground with no luck.
I have attached below a snapshot of the HTACCESS:
My website is bottega1900.com.au
BEGIN All In One WP Security
AIOWPS_PREVENT_IMAGE_HOTLINKS_START
RewriteEngine On RewriteCond %{HTTP_REFERER} !^$ RewriteCond %{REQUEST_FILENAME} -f RewriteCond %{REQUEST_FILENAME} .(gif|jpe?g?|png)$ [NC] RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?.bottega1900.com.au [NC] RewriteRule .(gif|jpe?g?|png)$ - [F,NC,L]
AIOWPS_PREVENT_IMAGE_HOTLINKS_END
END All In One WP Security
SetEnvIf Request_URI "index.php" DynamicTimeout=300 SetEnvIf Request_URI "wp-admin/themes.php" DynamicTimeout=300 SetEnvIf Request_URI "wp-admin/admin-ajax.php" DynamicTimeout=300 SetEnvIf Request_URI "wp-admin/admin.php" DynamicTimeout=300
HTTPS forced by SG-Optimizer
RewriteEngine On RewriteCond %{HTTP_HOST} !^www. [NC] RewriteRule ^ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301] RewriteCond %{HTTP:X-Forwarded-Proto} !https RewriteCond %{HTTPS} off RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
END HTTPS
Header always set Content-Security-Policy: upgrade-insecure-requests
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
BEGIN WordPress
The directives (lines) between "BEGIN WordPress" and "END WordPress" are
dynamically generated, and should only be modified via WordPress filters.
Any changes to the directives between these markers will be overwritten.
RewriteEngine On RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] RewriteBase / RewriteRule ^index.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L]
END WordPress
SGO Unset Vary
Header unset Vary
SGO Unset Vary END
Please let me know your thoughts.
Regards
]]>MailPoet is great, allowing us to use any WordPress or WooCommerce ressource in your website, but the MAJOR drawback of having a WordPress integrated newsletter solution like MailPoet is hotlinking!
As you need customers to view your emails images, and as MailPoet do not embed them in the email (which is great), you live a hard time fighting hotlinking as every directory must be accessible to any webmail domain your customers may use!
But if MailPoet could copy any image used in an email under a specific directory (even better if it’s in a subdir of this directory dedicated to each mail) prior to sending it, webmasters would just have to allow free access to this directory.
Everything else could be protected against hotlinking!
In the way I see it for now, MailPoet is a real SEO killer to websites as a consequence of that hotlinking issue that allows toxic backlinks you then need to disavow in Google Search Consoleā¦
I really wish you could add a new feature to do so (copy files in a different directory).
As a second gain, the sent emails would remain visible and accurate as long as you keep the email’s specific directory. Even if you delete the original image (or product for that matter if you use WooCommerce)!
I hope you’ll be interested in such a feature.
]]>1/ All in one Maths Captcha question constantly fails even though the Kadence option for Captcha is not used or switched on. Only resolution is to delete 2 lines of captcha code in an all in one php file.
2/ Hotlinking tick box has stopped images from being displayed on some of our websites. Only fix is to turn off the check box, or remove the code from .htacess file.
3/ Random site pages lose all formatting. Resolved by switching off all in one plugin.
Is anyone aware of compatibility issues between All in one and Kadence?
]]>Is it a hotlinking plugin?
Thank you.
]]>With Hotlinking protection on, how can one singularly allow a number of websites to hotlink?
Thanks
M
I’m generally very happy with this plugin and use it on various website. I decided to test the image hotlinking feature and ticked the box to prevent image hotlinking here https://[mysite]/wp-admin/admin.php?page=aiowpsec_firewall&tab=tab5
But when I test whether an image can be hotlinked, it’s still possible to do so.
So it looks like the feature to prevent image hotlinking doesn’t currently work.
I’ve used this site to test: https://altlab.com/hotlinkchecker.php
I can see this code on my .htaccess file:
#AIOWPS_PREVENT_IMAGE_HOTLINKS_START
<IfModule>
RewriteEngine On
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{REQUEST_FILENAME} -f
RewriteCond %{REQUEST_FILENAME} \.(gif|jpe?g?|png)$ [NC]
RewriteCond %{HTTP_REFERER} !^http(s)?://(.*)?\.mywebsite\.com [NC]
RewriteRule \.(gif|jpe?g?|png)$ - [F,NC,L]
</IfModule>
#AIOWPS_PREVENT_IMAGE_HOTLINKS_END
This is a fresh wordpress installation (version 5.8.2) with the default theme (twentytwentyone) and the latest version of AIOWPS (version 4.4.9). The site has no other plugins and no other modifications.
]]>