How to protect media directory with .htaccess?

# Only allow access to this directory if they are coming from your domain; excluding you, your server, Google and any other IPs
RewriteEngine On
RewriteCond %{REMOTE_ADDR} !^(xxx\.xxx\.xxx\.xxx|xxx\.xxx\xxx\.xxx|66\.249\.)
RewriteCond %{HTTP_HOST} !^(127\.0\.0\.0|localhost) [NC]
RewriteCond %{HTTP_REFERER} !^https?://(.+\.)?yourdomain\.com/ [NC]
RewriteRule .* http://yourdomain.com/ [L]

That should help, I think

Related Posts:

  1. How to rewrite WordPress uploads folder to another folder using htaccess
  2. Deny access to uploads folder with exceptions
  3. Protecting direct access to PDF and ZIP unless user logged in (without plugin)
  4. Prevent users from accessing mp3s in my uploads folder?
  5. How to proxy local WP uploads folder to live site
  6. Rewrite rule to load images from production does nothing
  7. Disabling direct access to images using .htaccess
  8. Password protect any file in WordPress
  9. Increase .htaccess file upload without prompting error
  10. wp-content/uploads/year/month returns 404
  11. WordPress 3.5: Setting custom “full URL path to files” in the Media Library?
  12. Get $image_id after uploading with media_sideload_image()
  13. simple solution for restricting access to (some) uploads/downloads
  14. how to upload and allow downloads of .mobi and .epub formats
  15. Organize uploads by year, month and day
  16. Different upload directory based on post type in a theme
  17. Media not actually deleted on disk when click “Permanent Delete”
  18. Add inline uploader to plugin option page
  19. Could a large quantity of files in the uploads folder affect performance?
  20. WP 3.5 media manager – how to create a working gallery frame
  21. How to call WP3.5 Media Library manager?
  22. What are the security reasons to disallow Microsoft Word uploads?
  23. WordPress Media Manager – limit to specific mime type
  24. Override json encoding in rest api
  25. Place static HTML files in path below WordPress page
  26. Manipulating Media uploader
  27. How to limit file type to be upload?
  28. Benefits of storing uploads in an assets folder?
  29. Removing rules from .htaccess
  30. Create custom tab in WordPress 5 media upload
  31. How to Check Disk Space used by Media Library
  32. Add/change multipart_params parameter when uploading post image
  33. Use WP_Filesystem to list files in directory
  34. White-list file types for media upload
  35. Gravity Forms – Repeatable “File Upload” field using “gform_column_input_content” filter [closed]
  36. Intercept request to /wp-content/uploads/random.file
  37. Add a YouTube or Vimeo video as a post attachment?
  38. WordPress multisite causing Error 101 (net::ERR_CONNECTION_RESET): Unknown error [duplicate]
  39. Upload files to wp-content/uploads – What to add in DB?
  40. Front-end Image Upload with Preview – Is this Possible in WP?
  41. Hook or function to upload media via url
  42. Prevent renaming of uploaded media
  43. Is it safe to delete uploaded photos if Photon (Jetpack) is activated?
  44. How do I get allowed Media Library upload file extension list?
  45. How to manage a big collection of files with wordpress?
  46. Why is my mod_rewrite not working?
  47. Override htacces rule only for specific directory
  48. Allow only attachment uploaded to current post
  49. Use the WP media uploader dialog for uploading a form attachment (non-admin). Offering progress and drag and drop feedback
  50. using wp_insert_attachment() results in guids with file names different to the same file when uploaded via media page in admin
  51. Separate Uploads folder on other server
  52. How to disable plupload completely from latest wordpress 3.6 and make browser upload default
  53. Restrict access of admin uploads to certain logged-in users?
  54. upload_mimes not accepting CSV
  55. Receiving 404 when uploading file larger than 10kb
  56. How to remove the [L] Flag for WordPress index .php mod_rewrite
  57. making media URL secured
  58. How to protect specific uploaded files from being accessed by non-logged-in users in WP-multisite
  59. Is it safe to allow non-admin users access to media uploader
  60. WYSIWYG editor with image upload for “Normal Users” [closed]
  61. How to edit attachment with media-upload.php?
  62. upload_max_filesize is set to 64 MB already but WordPress is still showing 2 MB
  63. .htaccess Non-‘www’ to ‘www’ Subdomain Redirection Only Works for Homepage
  64. Uploading PDF files from the front-end
  65. Uploads going to the root of wp-content/uploads
  66. WordPress Images, Header Videos and Carousel is not working live but perfect on Local Host Is It FTP? Filezilla?
  67. Uploaded image with non-english characters is named incorrectly in upload folder
  68. Can’t upload images (incorrect “file exceeds upload_max_filesize” error)
  69. Theoretical limit of upload file size [duplicate]
  70. Cropping thumbnails to specific dimensions on front end post
  71. Double slash in upload URLs
  72. Unable to upload new file as a product
  73. All my files are on my blog! I need sync solution
  74. Make inline uploader (plupload) on options page upload to a specific folder
  75. media file uploading
  76. htaccess redirect to path
  77. What is wrong with my wp_insert_attachment code?
  78. Editor User Role can’t see other users media
  79. How to allow .ged file uploads
  80. Media files not loading
  81. Set attachment category from file name on upload
  82. HTTP Error WordPress on IIS uploading image
  83. What folder to place Large Video files?
  84. _d_improd_ directory in uploads breaking site images
  85. Drag and Drop Media Not Working in Windows 10 Edge Browser
  86. Exclude some photos in media library
  87. Failed to load resource at admin screen
  88. Upload more than one media files with a post
  89. .htaccess not working in WordPress
  90. uploading photos
  91. How to handle image resize in media_handle_sideload?
  92. Image uploaded in media library, can only see it when I using the WP Edit Image feature. 404 when trying to view in browser
  93. Single file upload
  94. Add frontend editor with media buttons for Visitors and display only their media
  95. WordPress Custom Fonts Problem! [closed]
  96. I want to customize wp.media (the wordpress admin uploader) in order to change the file name but only in video custom post type
  97. Is it possible to restrict the number of media uploads (photos) per user?
  98. Cannot Upload Video (MP4) File
  99. Can not access .txt file which I uploaded through media
  100. How allow only the uploading user access to media