title: htaccess only accept traffic from specific http_referer
body: <p>I'm trying to set up a htaccess file that would accomplish the following:  </p>
  
  <p>Only allow my website to be viewed if the viewing user is coming from a specific domain (link)</p>
  
  <p>So, for instance.  I have a domain called.  protect.mydomain.com .  I only want people coming from a link on unprotected.mydomain.com to be able to access protect.mydomain.com.  </p>
  
  <p>The big outstanding issue I have is that if you get to protect.mydomain.com from unprotected.mydomain.com and click on a link in the protect.mydomain.com that goes to another page under protect.mydomain.com then I get sent back to my redirect because the http_referer is protect.mydomain.com .   So to combat that I put in a check to allow the referrer to be protect.mydomain.com as well.  It's not working and access is allowed from everywhere.  Here is my htaccess file. (All this is under https)</p>
  
  <pre><code>RewriteEngine On
  RewriteBase /
  RewriteCond %{HTTP_REFERER} ^https://(.+\.)*mydomain\.com
  RewriteCond %1 !^(protect|unprotected)\.$ 
  RewriteRule ^.*$ https://unprotected.mydomain.com/ [R=301,L]
  </code></pre>