I still think this is a big problem and I am a little closer to finding a solution, so I am hoping that by posting this here, someone with more knowledge can help us.
v1.2.3 - December 19, 2003
1092 * Added anti-hotlink code so the thumbnail script on
1093 one domain cannot be used by another domain. The
1094 list of allowed domains defaults to the current
1095 domain but is configurable below as
1096 $config_nohotlink_valid_domains. The message, text
1097 size, colors and whether to blank the image or not
1098 are also configurable
How do I edit “$config_nohotlink_valid_domains”? That seems to hold the key.
[source]