Title: [Plugin: BulletProof Security] Broken images after activating BulletProof Mode
Last modified: August 20, 2016

---

# [Plugin: BulletProof Security] Broken images after activating BulletProof Mode

 *  Resolved [illusiodesign](https://wordpress.org/support/users/illusiodesign/)
 * (@illusiodesign)
 * [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-broken-images/)
 * When I activate BulletProof Mode for the “Website Root Folder htaccess Security
   Mode”, I’m getting broken images across my site. Hotlink image protection is 
   turned off via cPanelX. Any recommendations?
 * [http://wordpress.org/extend/plugins/bulletproof-security/](http://wordpress.org/extend/plugins/bulletproof-security/)

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-broken-images/#post-3052066)
 * Well first off you cannot turn off the broken cPanel HotLink Protection Tool 
   because disable/enable is broken as well.
 * Please see this thread >>> [http://wordpress.org/support/topic/plugin-bulletproof-security-broken-cpanel-hotlink-tool-404-errors-unable-to-edit-htaccess-files?replies=5](http://wordpress.org/support/topic/plugin-bulletproof-security-broken-cpanel-hotlink-tool-404-errors-unable-to-edit-htaccess-files?replies=5)
 * Is your website a standard WordPress Single site or is it a Network/Multisite
   installation of WordPress?
    Did you click the AutoMagic buttons before activating
   BulletProof Modes?
 *  Thread Starter [illusiodesign](https://wordpress.org/support/users/illusiodesign/)
 * (@illusiodesign)
 * [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-broken-images/#post-3052069)
 * It’s a standard WP Single site and no, I clicked onto the AutoMagic buttons after
   install. It appears to be working when I comment out TimThumb on the htaccess
   file.
 *  Plugin Author [AITpro](https://wordpress.org/support/users/aitpro/)
 * (@aitpro)
 * [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-broken-images/#post-3052070)
 * Ok then most likely your thumbnail script is named something other than timthumb.
   php, phpthumb.php, thumb.php or thumbs.php. Right mouse click on one of your 
   image files and click on “Open image in new tab” or click on Properties depending
   on which Browser you are using so that you can see what the name of the thumbnail
   script is. Then you would just add it to the timthumb security filter.
 * Example: “some-other-thumb-script-filename\.php”
 *     ```
       # TimThumb Forbid RFI By Host Name But Allow Internal Requests
       RewriteCond %{QUERY_STRING} ^.*(http|https|ftp)(%3A|:)(%2F|/)(%2F|/)(w){0,3}.?(blogger|picasa|blogspot|tsunami|petapolitik|photobucket|imgur|imageshack|wordpress\.com|img\.youtube|tinypic\.com|upload\.wikimedia|kkc|start-thegame).*$ [NC,OR]
       RewriteCond %{THE_REQUEST} ^.*(http|https|ftp)(%3A|:)(%2F|/)(%2F|/)(w){0,3}.?(blogger|picasa|blogspot|tsunami|petapolitik|photobucket|imgur|imageshack|wordpress\.com|img\.youtube|tinypic\.com|upload\.wikimedia|kkc|start-thegame).*$ [NC]
       RewriteRule .* index.php [F,L]
       RewriteCond %{REQUEST_URI} (some-other-thumb-script-filename\.php|timthumb\.php|phpthumb\.php|thumb\.php|thumbs\.php) [NC]
       RewriteRule . - [S=1]
       ```
   
 *  Thread Starter [illusiodesign](https://wordpress.org/support/users/illusiodesign/)
 * (@illusiodesign)
 * [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-broken-images/#post-3052113)
 * Cool, that did the trick. Thanks for the speedy reply and awesome plugin.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘[Plugin: BulletProof Security] Broken images after activating BulletProof
Mode’ is closed to new replies.

 * ![](https://ps.w.org/bulletproof-security/assets/icon-128x128.png?rev=1731938)
 * [BulletProof Security](https://wordpress.org/plugins/bulletproof-security/)
 * [Support Threads](https://wordpress.org/support/plugin/bulletproof-security/)
 * [Active Topics](https://wordpress.org/support/plugin/bulletproof-security/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/bulletproof-security/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/bulletproof-security/reviews/)

## Tags

 * [broken images](https://wordpress.org/support/topic-tag/broken-images/)
 * [images](https://wordpress.org/support/topic-tag/images/)

 * 4 replies
 * 2 participants
 * Last reply from: [illusiodesign](https://wordpress.org/support/users/illusiodesign/)
 * Last activity: [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-bulletproof-security-broken-images/#post-3052113)
 * Status: resolved