Question

Im not sure if this is a duplicate, if it is, please accept my apologies in advance. How can I prevent others from leaching/downloading my @font-face fonts (eot, svg, ttf, woff) using .htaccess and only allowing my domain to use them?

Answer 1

Thanks to the guys over at the #httpd channel on IRC. I’ve finally found the htaccess block of code to prevent people from hotlinking to my fonts.

SetEnvIfNoCase Referer "^https?://([^/]*)?example\.com/" local_ref=1
SetEnvIf Referer ^$ local_ref=1

<FilesMatch "\.(eot|svg|ttf|woff)$">
  Order Allow,Deny
  Allow from env=local_ref
</FilesMatch>

Source: Apache Wiki.

For some reason, the code which @joshhendo provided me didn’t work for both font file types and images. I’m not sure how .htaccess works, perhaps others with more experience can chime in.