<img src="/display.php?id=34" border="0">

<?

$connection=@mysql_connect(...);

@mysql_select_db(...);

$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];

$rawdb=@mysql_query ($query,$connection);

if($rawdb AND @mysql_num_rows($rawdb)>0){

  $array=@ mysql_fetch_array($result);

  if (!empty($array["fileContents"])){

    // Output the MIME header

    header("Content-Type: ".$array["mime"]}");

    // Output the image

    echo $array["file"];

  }else{

    // something else...

  }

  @mysql_free_result($rawdb);

}else{

  // something else...

}

@mysql_close($connection);

?>

RewriteEngine On
RewriteCond %{HTTP_REFERER}	=""
RewriteCond %{HTTP_USER_AGENT} 	!^.*MSIE
RewriteCond %{REQUEST_URI}	!\.*htm$				[NC]
RewriteCond %{REQUEST_URI}	!\.*html$				[NC]
RewriteCond %{REQUEST_URI}	!\.*/$
RewriteRule ^(.*)$		[F,L]

RewriteCond %{HTTP_REFERER}	!=""
RewriteCond %{HTTP_REFERER}	!^http://mydomain.com			[NC]
RewriteCond %{HTTP_REFERER}	!^http://[a-z,A-Z,0-9,\-]+.mydomain.com	[NC]
RewriteCond %{REQUEST_URI}	!\.*htm$				[NC]
RewriteCond %{REQUEST_URI}	!\.*html$				[NC]
RewriteCond %{REQUEST_URI}	!\.*/$
RewriteRule ^(.*)$	[F,L]

$query="SELECT mime, file FROM images WHERE id=".$_GET["id"];

$query="SELECT mime, file FROM images WHERE id=".mysql_real_escape_string($_GET["id"]);

<script language=javascript>
//Beginning of "test.js" file
var accepted_domains=new Array("yourdomain.com","www.yourdomain.com")

var domaincheck=document.location.href //retrieve the current URL of user browser
var accepted_ok=false //set acess to false by default

if (domaincheck.indexOf("http")!=-1){ //if this is a http request
for (r=0;r<accepted_domains.length;r++){
if (domaincheck.indexOf(accepted_domains[r])!=-1){ //if a match is found
accepted_ok=true //set access to true, and break out of loop
break
}
}
}
else
accepted_ok=true

if (!accepted_ok){
alert("Fuck off linking to my images!!")
history.back(-1)
}

</script>
<img src="image123.jpg">