基于PHP实现图片防盗链

<?php
// 获取当前请求的域名
$referer = $_SERVER['HTTP_REFERER'];

// 检查请求的来源是否为空或者不属于你的域名
if($referer && !strstr($referer, "yourdomain.com")){
    // 返回403 Forbidden
    header('HTTP/1.1 403 Forbidden');
    exit;
}

// 如果检查通过，则输出图片
$imagePath = 'path_to_your_image.jpg';
header('Content-Type: image/jpeg');
readfile($imagePath);
?>

<?php
$referer = $_SERVER['HTTP_REFERER'];
$allowed_domains = array('example.com', 'www.example.com');
$allowed_referer = false;

foreach ($allowed_domains as $domain) {
    if (strpos($referer, $domain) !== false) {
        $allowed_referer = true;
        break;
    }
}

if (!$allowed_referer) {
    header('HTTP/1.1 403 Forbidden');
    exit;
}

$image_path = $_GET['path'];
$image_type = pathinfo($image_path, PATHINFO_EXTENSION);
header('Content-Type: image/' . $image_type);
readfile($image_path);

<img src="http://9i0i.com/pic.php?p=http://example.com/protect_image.php?path=/path/to/image.jpg" alt="Protected Image">

function protect_images($content) {
    $pattern = '/<img.*?src="http://9i0i.com/pic.php?p=(.*?)".*?>/i';
    preg_match_all($pattern, $content, $matches);

    foreach ($matches[1] as $image_url) {
        $image_path = str_replace(get_site_url(), ABSPATH, $image_url);
        $protected_url = get_site_url() . '/protect_image.php?path=' . $image_path;
        $content = str_replace($image_url, $protected_url, $content);
    }

    return $content;
}
add_filter('the_content', 'protect_images');