.htaccess to block access from one referrer

[58sniper]

Greetings!

I'm trying to send traffic coming in from one site to a specific page that should stop them.

Currently, I'm using:
RewriteEngine on
RewriteCond %{HTTP_REFERER} ^http://(www\.)?bad_domain\.com [NC]
RewriteCond %{REQUEST_URI}!^/simple.php
RewriteCond %{REQUEST_URI}!^/star_logo_185x175.jpg
RewriteRule .* /simple.php?sid=noway [F,L]

But users get:
You don't have permission to access / on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

What am I missing here?

the .php and .jpg files DO exist.

[closed]

Your code:

RewriteEngine on 
RewriteCond %{HTTP_REFERER} ^http://(www\.)?bad_domain\.com [NC] 
RewriteCond %{REQUEST_URI} !^/simple.php 
RewriteCond %{REQUEST_URI} !^/star_logo_185x175.jpg 
RewriteRule .* /simple.php?sid=noway [F,L]

What your code is doing is the following: If the visitor is from bad_domain.com and the visitor is not requesting simple.php and not requesting star_logo_185x175.jpg, display the page for a Forbidden document.

I'm guessing that what you want is: If the visitor is from bad_domain.com and the visitor requests simple.php, redirect the visitor permanently to simple.php?sid=noway.

RewriteEngine on 
RewriteCond %{HTTP_REFERER} ^http://(www\.)?bad_domain\.com [NC] 
RewriteCond %{REQUEST_URI} /simple.php
RewriteRule .* http://www.mydomain.com/simple.php?sid=noway [R=301,L]

Is that more like what you want to do?

[jdMorgan]

I think the point is to ALLOW the bad guy to see simple.php and the star_logo:

RewriteEngine on
RewriteCond %{HTTP_REFERER} ^http://(www\.)?bad_domain\.com [NC]
RewriteCond %{QUERY_STRING} !^sid=noway$
RewriteRule !^(simple\.php¦star\_logo\_185x175\.jpg)$ /simple.php?sid=noway [L]

Looks like the problem may have been the [F,L] flag. [L] is redundant when used with [F], and [F] redirects to the 403 error handler. Just use [L] to do a "silent" redirect to the noway page.

Posting on this forum modifies the "¦" character. You must replace it with a solid vertical pipe character from your keyboard before using the code.

Jim

[58sniper]

Ah. Ok. That makes sense. I couldn't figure out why I kept getting the 403 error. As soon as I pulled out the 'F', everything worked fine.

Much appreciated for both the knowledge, and the fix.