• Welcome to the Chevereto User Community!

    Here, users from all over the world come together to learn, share, and collaborate on everything related to Chevereto. It's a place to exchange ideas, ask questions, and help improve the software.

    Please keep in mind:

    • This community is user-driven. Always be polite and respectful to others.
    • Support development by purchasing a Chevereto license, which also gives you priority support.
    • Go further by joining the Community Subscription for even faster response times and to help sustain this space
  • Chevereto Support CLST

    Support response

    Support checklist

    • Got a Something went wrong message? Read this guide and provide the actual error. Do not skip this.
    • Confirm that the server meets the System Requirements
    • Check for any available Hotfix - your issue could be already reported/fixed
    • Read documentation - It will be required to Debug and understand Errors for a faster support response

Prevent External Websites/Users from using the Image Uploader

Dragonfruit

Chevereto Noob
🎯Description of the issue

I'm trying to prevent external users from using the uploader since SSO does not exist. What I've done is enabled guest uploading, but I'm trying to restrict access to the image page unless they launched the image uploader via the XF board.

Unfortunately when I add the usual HTACCESS bit of rewrite code which I've used to accomplish this with other custom pages, it breaks display functions for Chevereto.

▶🚶‍Reproduction steps
  1. Add this code in htaccess (have tried at the top, bottom, and within IfModule mod_rewrite.c in multiple places:
    Code:
    RewriteEngine onRewriteCond %{HTTP_REFERER} !https://mydomain.com/.*$ [NC]
    RewriteRule . home.php [NC,L]
😢Unexpected result
With this in place, trying to reach mydomain.com kicks me back to the home page just fine. But clicking "Image Upload", shows basically Chevereto with the theme stripped.

Is there any way to accomplish this while cooperating with the existing HTAccess code?

📃Error log message

No error messages.
 
Last edited:
Back
Top