A hot link is when someone else's website displays an image, video, or file from your server without your permission
When you upload an image to your website, that image lives on your server — the computer that stores your site's files. A hot link happens when another website links directly to that file instead of hosting their own copy. Their page loads your image from your server, but their visitors see it as part of their site.
The result is that you pay the bandwidth cost — the data transfer fee — while someone else gets the benefit. If their page gets heavy traffic, your server works harder and your hosting bill climbs. You also lose control over how your image appears and where it shows up.
Hot linking is different from a regular hyperlink. A hyperlink points to a webpage. A hot link embeds a file directly into another page, pulling it live from your server each time someone views it.
Key Takeaways
- Hot linking means another website displays your image or file on their page by pulling it directly from your server, not from their own.
- You bear the bandwidth cost and server load when someone hot links your files, even though their visitors see the content as theirs.
- Hot linking is usually unintentional — many people do not realize they are linking to a file instead of uploading their own copy.
- You can block hot links by configuring your server to refuse requests from outside domains, a setting most hosting providers make available in the control panel.
- Replacing a hot-linked image with a different file (like a warning image) is a common way to discourage the practice without blocking the link entirely.
How hot linking drains your bandwidth and server resources
Every time someone visits a page that hot links your image, your server sends that image to their browser. If the hot-linked page gets thousands of visitors a month, your server is sending that image thousands of times — and you pay for every transfer.
Bandwidth costs vary by hosting provider, but overages add up quickly. A single popular image hot linked by a high-traffic site can cost you real money. Beyond cost, heavy hot linking can slow your own site down because your server is busy serving files to other people's visitors instead of focusing on your own.
The problem compounds if multiple sites hot link the same image. Your server handles each request separately, and your bandwidth meter climbs with each one.
Why hot linking usually happens by accident
Most hot linking is not intentional theft. Someone finds an image online, right-clicks it, copies the image address, and pastes it into their own page. They see the image appear and assume they have embedded it correctly. They do not realize they are pulling it from someone else's server instead of uploading their own copy.
Content management systems and website builders sometimes make this easier to do by accident. A user might paste a full image URL into a field meant for uploading, and the system treats it as a hot link instead of downloading and hosting the file locally.
Intentional hot linking does happen — some people deliberately link to others' images to save hosting space — but most cases come from not understanding the difference between linking to a file and hosting it yourself.
How to block hot links on your server
Most hosting control panels include a hotlink protection feature that you can turn on without touching code. This setting tells your server to refuse image requests that come from domains other than your own. When someone tries to hot link your image from another site, their page either shows a broken image icon or displays a message you write yourself.
To enable hotlink protection, log into your hosting control panel (usually cPanel, Plesk, or your provider's custom interface), find the hotlink protection tool, and add your domain to the whitelist. The server will then block requests from any other domain. Some panels let you set a custom image to display instead of a broken link — many people use this to display a message like "Please host your own images."
If your hosting panel does not have a built-in hotlink protection tool, you can create a rule in your .htaccess file (a configuration file on your server) that does the same thing. Your hosting provider's support team can show you the exact code to add if you need it.
When to replace a hot-linked image instead of blocking it
Blocking hot links stops the problem completely, but replacing the image is a gentler approach that sometimes works better. Instead of showing a broken image, you replace the hot-linked file with a different image — often a message asking the person to host their own copy, or a watermark with your site's name.
This approach works because the person hot linking your image sees the change when ready and usually realizes something is wrong. They contact you, or they decide to upload their own image instead. It also makes the problem visible to their visitors, which can embarrass the site owner into fixing it.
To replace a hot-linked image, you rename the original file and upload a new image with the old filename. The next time someone's page loads, they get the new image instead. This method requires you to monitor which images are being hot linked, so it works best if only one or two images are affected.
How to learn about your images are being hot linked
Your server logs record every request for every file, including where the request came from. If a request comes from a domain other than yours, that is a hot link. Most hosting control panels include a log viewer or analytics tool that shows you this information.
In cPanel, you can check your Raw Access Logs or use the Bandwidth tool to see which files are using the most data and where requests are coming from. Third-party analytics tools like Cloudflare also show you hot link traffic if you use them.
Look for image files (ending in .jpg, .png, .gif, or .webp) that show high bandwidth usage but are not being requested from your own domain. If you see a pattern — the same image requested hundreds of times from a single outside domain — that is hot linking.
The difference between hot linking and other link problems
A broken link points to a page or file that no longer exists. When someone clicks it, they get a 404 error. A hot link is a working link to a file on someone else's server — the file exists, but it is being served to the wrong audience.
A redirect is when a link points to one URL but automatically sends visitors to a different URL. Redirects are intentional and controlled by the site owner. Hot linking is usually unintentional and uncontrolled.
An external link is any link that points to a different website. Most external links are hyperlinks to webpages, not hot links to files. The distinction matters because external links are normal and expected, while hot links consume your resources.
Frequently Asked Questions
Can I hot link images from other websites without breaking the law?
Hot linking is not illegal, but it violates most websites' terms of service and can result in your site being blocked or your image being replaced with something embarrassing. It is also disrespectful to the site owner because you are using their resources. The right approach is to read the image, check the license, and upload your own copy to your server.
What happens if I enable hotlink protection and someone tries to view a hot-linked image?
Their browser shows a broken image icon, or displays the custom image you set up instead. The page still loads, but the image does not appear. If you set a custom message, their visitors see that message instead of the image they expected.
Does hotlink protection affect my own website's images?
No. Hotlink protection only blocks requests from outside domains. Your own pages request images from your own domain, so they are always whitelisted and work normally. The protection only affects other websites trying to pull your images.
Can I tell which website is hot linking my images?
Yes. Your server logs show the referring domain — the website that made the request. Most hosting control panels display this in their bandwidth or log viewer tools. You can see exactly which site is hot linking and how much bandwidth they are using.
What if I want to allow one specific website to hot link my images?
Most hotlink protection tools let you whitelist specific domains. You can add the domain you want to allow to the exceptions list, and your server will serve images to that domain while blocking everyone else. Check your hosting control panel for a whitelist or exceptions option.