GICT knowledge base
How to prevent other sites from linking files on your website
Published
Sometimes you want to prevent other websites from directly linking to files present on you server. Hotlink Protection which is a security feature of cPanel allows you to specify URLs which are allowed to link files from your server. It helps to save bandwidth and it prevents the stealing of your content.
Example of linking
An image is present on your server and another website is displaying that image using <img> tag on their website. By enabling Hotlink Protection for files you can block or grant access to other websites.
You may follow the video tutorial given below or continue reading.
Steps involved in enabling Hotlink Protection
- Go to cPanel.
- Scroll down to Security tab.
Hotlink1 - On clicking HotLink Protection you will be presented with a configuration screen.
- Initially you will see that the protection is currently disabled. You need to enable it first then you can alter the settings.
Hotlink2 - On clicking Enable you can see the allowed URLs and protected extensions.
Hotlink3 - Go back to edit the list of allowed URLs and blocked extensions according to your need.
Hotlink4
Note: If you select the checkbox to allow direct request then users can directly access the file by entering URL of that file into a browser. So to disable this feature keep it unchecked. This feature comes in handy when you want only members of your website to download certain file. - You can specify the custom message on a URL if user try to access a blocked file on your server by specifying URL in the field given below. Hotlink5
- Click on Submit to complete save the settings.
Related guides
Host Additional Domains on an Eligible InterServer Account
Check your hosting limits, choose a separate site or alias and use cPanel or DirectAdmin with deliberate DNS, content and certificate verification.
cPanelHardening Your cPanel Server: Beyond the Basics After CVE-2026-41940
Security is a moving target. With the recent discovery of CVE-2026-41940, it has become clear that just having a firewall isn't enough anymore.
cPanelcPanel and Plesk notice: Awstats,. Webalizer and Analog stats are being removed
Important Update: cPanel and Plesk Phasing Out Legacy Statistics Tools If you regularly check your website traffic through your hosting control panel, we have an...
cPanelThe dangers of shared licenses (in other words unofficial/cracked licenses)
Why Cracked cPanel Licenses Aren’t Worth the Risk: A Guide for InterServer Customers When you’re managing a server, every dollar counts.
