.png&w=3840&q=75)
Websites & Hosting4 min
How to Protect Images from Bandwidth Theft Using cPanel
NS
NameSilo Staff9/2/2026
Share
Hotlinking occurs when another website embeds images or files stored directly on your server, consuming your hosting bandwidth. To block this, open the Hotlink Protection tool in cPanel, click Enable, specify which domain names are allowed to link to your files, and choose whether to redirect hotlinked requests to a custom image.
What Is Hotlinking?
When Site B embeds
<img src="yoursite.com/photo.jpg"> directly in their own page instead of hosting a copy, every visitor to Site B triggers a request against your server. You pay the bandwidth cost, and Site B gets the visual content for free.At small scale this barely registers. At scale, a single popular post on a high-traffic site linking directly to your images can spike your bandwidth usage and slow your actual site for real visitors, all from traffic that never lands on your domain.
Why It Matters: Protecting Your Quota and Performance
Hosting bandwidth is a finite monthly resource. Every hotlinked image request draws from the same pool your legitimate visitors depend on. A single viral repost of one of your images on an unrelated site can consume a disproportionate share of your monthly allocation in days, degrading load times for your own audience in the process.
Implementation Steps
Step 1: Log into cPanel and scroll to the Security section. Click Hotlink Protection.
Step 2: Click Enable. Your own domain is automatically added to the allowed referrers list.
Step 3: Add any additional domains that should be permitted, such as a CDN subdomain or a partner site you've authorized.
Step 4: Specify which file types to protect: jpg, jpeg, gif, png, bmp, webp, svg, mp4, pdf are commonly restricted extensions.
Step 5: Choose your redirect behavior, covered in detail below.
Step 6: Save, then test by embedding one of your images in a page on an unrelated domain to confirm it's blocked.
The Custom Redirect Trick
Instead of returning a blank broken-image icon, redirect blocked hotlink requests to a custom graphic, something clearly stating "This image is hosted on [yoursite.com] and cannot be used without permission."
The effect is twofold: it stops the bandwidth drain, and it turns every attempted theft into free advertising for your site displayed directly on the page that tried to steal from you.
Protecting SEO: The Blank Referrer Detail
Search engine crawlers indexing images for services like Google Images typically request the file directly, without sending any referrer header at all, not even Google's own domain. This means the common advice to "whitelist Googlebot as an allowed referrer" doesn't actually work as stated, since there's no referrer domain to whitelist in the first place.
What actually works: Enable the option to allow blank or empty referrers, often labeled "Allow direct requests" in cPanel. This permits exactly the no-referrer request search crawlers send, while still blocking requests carrying another site's domain as the referrer. Done correctly, hotlink protection has no negative impact on image search visibility.
Common Mistakes
Forgetting your own subdomains or staging environment: If staging.yoursite.com or cdn.yoursite.com isn't explicitly added to the allowed list, your own images can break on your own properties the moment protection is enabled.
Whitelisting by User-Agent instead of handling blank referrers correctly: Some guides suggest allowing any request claiming to be "Googlebot" in its User-Agent string. This is trivially spoofed by scrapers and doesn't reflect how legitimate crawlers actually behave.
What This Means for You
NameSilo Hosting includes full cPanel access with Hotlink Protection built in, ready to configure directly from your dashboard. Need a fresh domain to host original content on? Search available names.
Frequently Asked Questions
What is hotlink protection?
A cPanel tool blocking other domains from embedding your files directly.
How do I stop people from using my image URLs?
Enable Hotlink Protection in cPanel's Security section and configure allowed domains.
Does hotlink protection hurt my SEO?
Not when configured correctly, including allowing blank-referrer requests.
Can search engine bots still index my images with hotlink protection?
Yes, if blank/empty referrers are permitted in your configuration.
How do I enable hotlinking in cPanel?
Security → Hotlink Protection → Enable, then configure allowed domains.
What file types can I protect with hotlink protection?
Common types include jpg, png, gif, webp, svg, mp4, and pdf.
Why are my images broken after enabling hotlink protection?
A subdomain or staging environment likely wasn't added to the allowed list.
Does NameSilo hosting offer hotlink protection?
Yes, included with cPanel access on NameSilo hosting plans.
.png&w=2048&q=75)
NameSilo StaffThe NameSilo staff of writers worked together on this post. It was a combination of efforts from our passionate writers that produce content to educate and provide insights for all our readers.
More articleswritten by NameSilo
.png&w=3840&q=75)
.png&w=3840&q=75)